[AMBARI-12398] Falcon Server Web UI alert after adding Falcon on Kerberized cluster

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.1
• Component/s: ambari-server
• Assignee: Dmitry Lysnichenko
• Reporter: Dmitry Lysnichenko
• Created: 13/Jul/15 17:59
• Updated: 14/Jul/15 15:27
• Resolved: 13/Jul/15 18:04

Description

STR
Install cluster without Falcon
Enable security (MIT)
Add Falcon service
Regenerate keytabs
Restart all services

In Falcon logs:

2015-07-11 19:25:21,740 INFO  - [main:] ~ FalconAuditFilter initialization started (FalconAuditFilter:49)
2015-07-11 19:25:21,745 INFO  - [main:] ~ FalconAuthenticationFilter initialization started (FalconAuthenticationFilter:81)
2015-07-11 19:25:21,762 WARN  - [main:] ~ failed authentication: javax.servlet.ServletException: java.lang.IllegalArgumentException: Invalid rule: \ (log:76)
2015-07-11 19:25:21,762 WARN  - [main:] ~ Failed startup of context org.mortbay.jetty.webapp.WebAppContext@507d20bb{/,/usr/hdp/current/falcon-server/server/webapp/falcon} (log:89)
javax.servlet.ServletException: java.lang.IllegalArgumentException: Invalid rule: \
	at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:240)
	at org.apache.hadoop.security.authentication.server.AuthenticationFilter.initializeAuthHandler(AuthenticationFilter.java:238)
	at org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:227)
	at org.apache.falcon.security.FalconAuthenticationFilter.init(FalconAuthenticationFilter.java:82)
	at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:97)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:713)
	at org.mortbay.jetty.servlet.Context.startContext(Context.java:140)
	at org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1282)
	at org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:519)
	at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:499)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:130)
	at org.mortbay.jetty.Server.doStart(Server.java:224)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.apache.falcon.util.EmbeddedServer.start(EmbeddedServer.java:57)
	at org.apache.falcon.Main.main(Main.java:83)
Caused by: java.lang.IllegalArgumentException: Invalid rule: \
	at org.apache.hadoop.security.authentication.util.KerberosName.parseRules(KerberosName.java:331)
	at org.apache.hadoop.security.authentication.util.KerberosName.setRules(KerberosName.java:397)
	at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:210)
	... 16 more
2015-07-11 19:25:21,776 ERROR - [main:] ~ Nested in javax.servlet.ServletException: java.lang.IllegalArgumentException: Invalid rule: \: (log:87)
java.lang.IllegalArgumentException: Invalid rule: \
	at org.apache.hadoop.security.authentication.util.KerberosName.parseRules(KerberosName.java:331)
	at org.apache.hadoop.security.authentication.util.KerberosName.setRules(KerberosName.java:397)
	at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:210)
	at org.apache.hadoop.security.authentication.server.AuthenticationFilter.initializeAuthHandler(AuthenticationFilter.java:238)
	at org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:227)
	at org.apache.falcon.security.FalconAuthenticationFilter.init(FalconAuthenticationFilter.java:82)
	at org.mortbay.jetty.servlet.FilterHolder.doStart(FilterHolder.java:97)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.servlet.ServletHandler.initialize(ServletHandler.java:713)
	at org.mortbay.jetty.servlet.Context.startContext(Context.java:140)
	at org.mortbay.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1282)
	at org.mortbay.jetty.handler.ContextHandler.doStart(ContextHandler.java:519)
	at org.mortbay.jetty.webapp.WebAppContext.doStart(WebAppContext.java:499)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.mortbay.jetty.handler.HandlerWrapper.doStart(HandlerWrapper.java:130)
	at org.mortbay.jetty.Server.doStart(Server.java:224)
	at org.mortbay.component.AbstractLifeCycle.start(AbstractLifeCycle.java:50)
	at org.apache.falcon.util.EmbeddedServer.start(EmbeddedServer.java:57)
	at org.apache.falcon.Main.main(Main.java:83)

Issue Links

• links to: review