Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-12649 Improve Kerberos diagnostics and failure handling
  3. HADOOP-13808

replace `Can't get Master Kerberos principal` message with useful information about principal and configuration item

    Details

    • Type: Sub-task
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 2.7.3
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None
    • Target Version/s:

      Description

      Clients get the `Can't get Master Kerberos principal` error message when their config doesn't identify the principal for a service.

      This message is fairly useless as

      1. it doesn't identify the service for which a principal is sought
      2. it doesn't identify the configuration property looked for
      3. it doesn't provide any guidance of how to fix it

      As a result, anyone seeing this doesn't have a clue what to do.

      I propose

      1. naming the principal sought, e.g. "namenode", "YARN RM"
      2. naming the configuration item looked for
      3. adding a link to a wiki page covering the problem

      KDiag should scan through the common set of principals if it doesn't already

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              stevel@apache.org Steve Loughran
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated: