[IMPALA-6849] Sentry failed to start in unit tests

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Information Provided
• Affects Version/s: Impala 2.12.0
• Component/s: Security
• Labels: broken-build
• Epic Color: ghx-label-5
• Assignee: Unassigned
• Reporter: Vuk Ercegovac
• Created: 13/Apr/18 18:16
• Updated: 13/Apr/18 18:44
• Resolved: 13/Apr/18 18:18

Description

...
07:07:56  --> Starting the Sentry Policy Server
07:09:07 Error in /data/jenkins/workspace/<test version>/repos/Impala/testdata/bin/run-all.sh at line 81: $IMPALA_HOME/testdata/bin/run-sentry-service.sh > \
...

The unit test was for s3. In the sentry startup logs, there's several retries and a problem with listing roles:

...
8/04/11 07:09:05 ERROR transport.RetryClientInvocationHandler: failed to execute listRoles
java.lang.reflect.InvocationTargetException
at sun.reflect.GeneratedMethodAccessor1.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at sentry.org.apache.sentry.core.common.transport.RetryClientInvocationHandler.invokeImpl(RetryClientInvocationHandler.java:95)
at sentry.org.apache.sentry.core.common.transport.SentryClientInvocationHandler.invoke(SentryClientInvocationHandler.java:41)
at com.sun.proxy.$Proxy0.listRoles(Unknown Source)
at org.apache.impala.util.SentryPolicyService.listAllRoles(SentryPolicyService.java:393)
at org.apache.impala.testutil.SentryServicePinger.main(SentryServicePinger.java:75)
Caused by: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to jenkins. Server Stacktrace: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to jenkins
at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessor.list_sentry_roles_by_group(SentryPolicyStoreProcessor.java:581)
at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_roles_by_group.getResult(SentryPolicyService.java:1077)
at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_roles_by_group.getResult(SentryPolicyService.java:1062)
...

Issue Links

• causes: IMPALA-6850 Print the actual error message to the console when Sentry fails