[KUDU-2870] Checksum scan fails with "Not authorized" error when authz enabled

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.10.0
• Fix Version/s: 1.10.0
• Component/s: authz
• Target Version/s: 1.10.0
• Code Review: https://gerrit.cloudera.org/c/13681/
• Assignee: Andrew Wong
• Reporter: Mike Percy
• Created: 19/Jun/19 18:20
• Updated: 08/Jul/19 23:05
• Resolved: 08/Jul/19 23:05

Description

While testing a Kudu 1.10.0 RC build with authorization enabled, I tried a checksum scan and it failed:

[mpercy@mpercy-c63s-0619-1 ~]$ kudu cluster ksck mpercy-c63s-0619-1.vpc.cloudera.com -tables=default.loadgen_auto_b527de07b2d842f3a3c82c5f85eb2854 -checksum_scan -sections=CHECKSUM_RESULTS
Checksum finished in 0s: 0/8 replicas remaining (0B from disk, 0 rows summed)
Checksum Summary
-----------------------
default.loadgen_auto_b527de07b2d842f3a3c82c5f85eb2854
-----------------------
T 09d0df0ca48c41bf94c6a3a03533b811 P 7d31913f6bbf4355a974c76e4f82c72a (mpercy-c63s-0619-4.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented
T 16cafc1e2e814b5fb988b22554ac306b P 11edb01b3b184a2da8586fa5cffda90c (mpercy-c63s-0619-3.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented
T 37d40c90b0614b5d9515d1458e31657c P de47be31840f4b349f970cf759097cec (mpercy-c63s-0619-2.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented
T 5da264a95d31474ea4b0b2e464a5b261 P de47be31840f4b349f970cf759097cec (mpercy-c63s-0619-2.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented
T 6acad06c945942b5af696f7f59b4d2ea P 7d31913f6bbf4355a974c76e4f82c72a (mpercy-c63s-0619-4.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented
T 949f20e82db1467fa9f968853c901f11 P 11edb01b3b184a2da8586fa5cffda90c (mpercy-c63s-0619-3.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented
T 9eda0d8c267c44efb9d76cf8fb911f93 P 921f4e7e28274a9189c978162d604f2e (mpercy-c63s-0619-5.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented
T a1ec4565447c4628baa6a1c5f9765c7a P 11edb01b3b184a2da8586fa5cffda90c (mpercy-c63s-0619-3.vpc.cloudera.com:7050): Error: Remote error: Not authorized: no authorization token presented

==================
Warnings:
==================
Some masters have unsafe, experimental, or hidden flags set
Some tablet servers have unsafe, experimental, or hidden flags set

==================
Errors:
==================
Aborted: checksum scan error: 8 errors were detected

FAILED
Runtime error: ksck discovered errors