[FALCON-819] Submission of cluster with registry interface fails on secure setup

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.5, 0.6
• Fix Version/s: 0.6
• Labels: security
• Assignee: Sowmya Ramesh
• Reporter: Sowmya Ramesh
• Created: 18/Oct/14 01:53
• Updated: 20/Oct/14 18:55
• Resolved: 20/Oct/14 18:55

Description

On a secure setup cluster submission fails with "Invalid Catalog server or port"

org.apache.falcon.entity.parser.ValidationException: Invalid Catalog server or port: thrift://falcon-secure-sramesh-3.cs1cloud.internal:9083
        at org.apache.falcon.entity.parser.ClusterEntityParser.validateRegistryInterface(ClusterEntityParser.java:205)
        at org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:82)
        at org.apache.falcon.entity.parser.ClusterEntityParser.validate(ClusterEntityParser.java:53)
        at org.apache.falcon.resource.AbstractEntityManager.validate(AbstractEntityManager.java:373)
        at org.apache.falcon.resource.AbstractEntityManager.submitInternal(AbstractEntityManager.java:340)
        at org.apache.falcon.resource.AbstractEntityManager.submit(AbstractEntityManager.java:156)
        at org.apache.falcon.resource.ConfigSyncService.submit(ConfigSyncService.java:44)
        at sun.reflect.GeneratedMethodAccessor41.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.apache.falcon.resource.channel.IPCChannel.invoke(IPCChannel.java:49)
        at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$1.doExecute(SchedulableEntityManagerProxy.java:125)
        at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy$EntityProxy.execute(SchedulableEntityManagerProxy.java:448)
        at org.apache.falcon.resource.proxy.SchedulableEntityManagerProxy.submit_aroundBody0(SchedulableEntityManagerProxy.java:127)
....
Caused by: org.apache.falcon.FalconException: Exception checking if the service is alive:org.apache.hive.hcatalog.common.HCatException : 9001 : Exception occurred while processing HCat request : MetaException while fetching database. Cause : MetaException(message:org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): User: hive/[e-mail] is not allowed to impersonate falcon/[e-mail])
        at org.apache.falcon.catalog.HiveCatalogService.isAlive(HiveCatalogService.java:133)
        at org.apache.falcon.entity.parser.ClusterEntityParser.validateRegistryInterface(ClusterEntityParser.java:201)
        ... 61 more
Caused by: org.apache.hive.hcatalog.common.HCatException : 9001 : Exception occurred while processing HCat request : MetaException while fetching database. Cause : MetaException(message:org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): User: hive/[e-mail] is not allowed to impersonate falcon/[e-mail])
        at org.apache.hive.hcatalog.api.HCatClientHMSImpl.getDatabase(HCatClientHMSImpl.java:85)
        at org.apache.falcon.catalog.HiveCatalogService.isAlive(HiveCatalogService.java:130)
        ... 62 more
Caused by: MetaException(message:org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException): User: hive/[e-mail] is not allowed to impersonate falcon/[e-mail])