Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-6647

balancer fails with "is not authorized for protocol interface NamenodeProtocol" in secure environment

Log workAgile BoardRank to TopRank to BottomAttach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskConvert to sub-taskMoveLinkCloneLabelsUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • None
    • None
    • None
    • Reviewed
    • security

    Description

      user logs in as hdfs/something@something and tries to run balancer.
      balancer is using NameNode Protocol which authorizes based on server principal key.
      but NameNode key is hdfs/_HOST@.. now. so it fails.
      To fix we need to compare the short names only.

      Attachments

        Activity

          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            boryas Boris Shkolnik Assign to me
            boryas Boris Shkolnik
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Issue deployment