Details
-
Bug
-
Status: Patch Available
-
Major
-
Resolution: Unresolved
-
2.7.3, 2.8.1, 3.0.0-alpha3
-
None
-
None
Description
FSCK started by xx (auth:KERBEROS_SSL) failed with exception msg "fsck encountered internal errors!"
FSCK use FSCKServlet to submit RPC to NameNode, it use KERBEROS_SSL as its AuthenticationMethod in JspHelper.java
/** Same as getUGI(context, request, conf, KERBEROS_SSL, true). */ public static UserGroupInformation getUGI(ServletContext context, HttpServletRequest request, Configuration conf) throws IOException { return getUGI(context, request, conf, AuthenticationMethod.KERBEROS_SSL, true); }
But when setup SaslConnection with server, KERBEROS_SSL will failed to create SaslClient instance. See SaslRpcClient.java
private SaslClient createSaslClient(SaslAuth authType) throws SaslException, IOException { .... case KERBEROS: { if (ugi.getRealAuthenticationMethod().getAuthMethod() != AuthMethod.KERBEROS) { return null; // client isn't using kerberos }
Attachments
Attachments
Issue Links
- is duplicated by
-
HDFS-12236 FsckServlet can not create SaslRpcClient with auth KERBEROS_SSL
- Resolved