[HADOOP-6647] balancer fails with "is not authorized for protocol interface NamenodeProtocol" in secure environment

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Hadoop Flags: Reviewed
• Tags: security
• Assignee: Boris Shkolnik
• Reporter: Boris Shkolnik
• Created: 19/Mar/10 20:28
• Updated: 14/Jul/10 11:14
• Resolved: 12/Jul/10 21:21

Description

user logs in as hdfs/something@something and tries to run balancer.
balancer is using NameNode Protocol which authorizes based on server principal key.
but NameNode key is hdfs/_HOST@.. now. so it fails.
To fix we need to compare the short names only.