[HBASE-20859] Backup and incremental load could fail in secure clusters

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0-alpha-1
• Component/s: backup&restore
• Hadoop Flags: Reviewed
• Assignee: Wei-Chiu Chuang
• Reporter: Wei-Chiu Chuang
• Created: 07/Jul/18 03:05
• Updated: 01/Aug/18 06:22
• Resolved: 11/Jul/18 23:57

Description

HBase Backup and incremental load uses HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY for temporary path.

HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY uses the Java runtime user name to generate a temporary path on HDFS. This can be a wrong assumption in a secure cluster where Kerberos principal name can be different from the system user name.

public static final String DEFAULT_TEMPORARY_HDFS_DIRECTORY = "/user/"
      + System.getProperty("user.name") + "/hbase-staging";

This constant variable is used in BackupUtils.java and HFileOutputFormat2.java

In such cases, you will not be able to write files to the temporary location on HDFS due to permission error, and therefore operations such as backup will fail.

This bug is similar in nature to HDFS-12485.

Issue Links

• is part of: HBASE-17362 HBase Backup/Restore Phase 4
• links to: Review Board (master)