Hadoop Common
  1. Hadoop Common
  2. HADOOP-6647

balancer fails with "is not authorized for protocol interface NamenodeProtocol" in secure environment

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None
    • Hadoop Flags:
      Reviewed
    • Tags:
      security

      Description

      user logs in as hdfs/something@something and tries to run balancer.
      balancer is using NameNode Protocol which authorizes based on server principal key.
      but NameNode key is hdfs/_HOST@.. now. so it fails.
      To fix we need to compare the short names only.

      1. HADOOP-6647-BP20.patch
        2 kB
        Boris Shkolnik
      2. HADOOP-6647.patch
        2 kB
        Boris Shkolnik

        Activity

        Boris Shkolnik made changes -
        Status Patch Available [ 10002 ] Resolved [ 5 ]
        Hadoop Flags [Reviewed]
        Resolution Fixed [ 1 ]
        Boris Shkolnik made changes -
        Status Open [ 1 ] Patch Available [ 10002 ]
        Boris Shkolnik made changes -
        Attachment HADOOP-6647.patch [ 12447754 ]
        Boris Shkolnik made changes -
        Assignee Boris Shkolnik [ boryas ]
        Boris Shkolnik made changes -
        Description user logs in as hdfs/dev.ygrid.yahoo.com@DEV.YGRID.YAHOO.COM and tries to run balancer.
        balancer is using NameNode Protocol which authorizes based on server principal key.
        but NameNode key is hdfs/_HOST@.. now. so it fails.
        To fix we need to compare the short names only.
        user logs in as hdfs/something@something and tries to run balancer.
        balancer is using NameNode Protocol which authorizes based on server principal key.
        but NameNode key is hdfs/_HOST@.. now. so it fails.
        To fix we need to compare the short names only.
        Boris Shkolnik made changes -
        Field Original Value New Value
        Attachment HADOOP-6647-BP20.patch [ 12439325 ]
        Boris Shkolnik created issue -

          People

          • Assignee:
            Boris Shkolnik
            Reporter:
            Boris Shkolnik
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development