[ACCUMULO-4415] Tracer requires instance.secret

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Invalid
• Component/s: trace
• Assignee: Unassigned
• Reporter: Christopher Tubbs
• Created: 18/Aug/16 22:26
• Updated: 30/Dec/21 19:22
• Resolved: 30/Dec/21 19:22

Description

Tracer incorrectly uses instance.secret for its /tracers area in ZooKeeper.

The tracer does not use the Accumulo system credentials, and instead uses a specific tracer username and password. It should also not use the instance.secret (which is for the system credentials).

A side effect of this bug is that ChangeSecret does not update the /tracers ACLs in ZooKeeper, preventing the tracer from working entirely after the instance.secret is changed.

The following error will be seen in the monitor after the ChangeSecret tool is run.

Thread 'tracer' died.
	org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /tracers/trace-
		at org.apache.zookeeper.KeeperException.create(KeeperException.java:113)
		at org.apache.zookeeper.KeeperException.create(KeeperException.java:51)
		at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783)
		at org.apache.accumulo.fate.zookeeper.ZooUtil.putEphemeralSequential(ZooUtil.java:464)
		at org.apache.accumulo.fate.zookeeper.ZooReaderWriter.putEphemeralSequential(ZooReaderWriter.java:99)
		at org.apache.accumulo.tracer.TraceServer.registerInZooKeeper(TraceServer.java:318)
		at org.apache.accumulo.tracer.TraceServer.<init>(TraceServer.java:255)
		at org.apache.accumulo.tracer.TraceServer.main(TraceServer.java:360)
		at org.apache.accumulo.tracer.TracerExecutable.execute(TracerExecutable.java:33)
		at org.apache.accumulo.start.Main$1.run(Main.java:120)
		at java.lang.Thread.run(Thread.java:745)

This affects at least the current 1.8 branch (1.8.0-SNAPSHOT), but I haven't checked earlier versions.

Issue Links

• is duplicated by: ACCUMULO-4529 ChangeSecret doesn't correct tracers
• is related to: ACCUMULO-4163 ZooZap should deal with /tracers being missing
• relates to: ACCUMULO-2971 ChangeSecret tool should refuse to run if no write access to HDFS