Uploaded image for project: 'Kudu'
  1. Kudu
  2. KUDU-3558

Error out when ranger subprocess is started with kerberos disabled

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Minor
    • Resolution: Fixed
    • None
    • 1.18.0
    • None
    • None

    Description

      Today, when kudu cluster (with disabled authentication), is started with Kudu ranger, the ranger subprocess doesn't start because of missing keytab file.
      We do catch this error but it happens pretty late in java subprocess init routine. And sometimes can be pretty confusing during investigation if not looking at the right log file.
      The error message looks like this in stderr log file:
      ++
      Exception in thread "main" org.apache.kudu.subprocess.KuduSubprocessException: Kudu principal and Keytab file must be provided when Kerberos is enabled in Ranger
      at org.apache.kudu.subprocess.ranger.authorization.RangerKuduAuthorizer.init(RangerKuduAuthorizer.java:78)
      at org.apache.kudu.subprocess.ranger.RangerProtocolHandler.<init>(RangerProtocolHandler.java:45)
      at org.apache.kudu.subprocess.ranger.RangerSubprocessMain.main(RangerSubprocessMain.java:39)
      ++

      This Jira will be used to detect this error pretty early in the process and log some actionable information inside kudu master logs.

      Attachments

        Activity

          People

            araina Ashwani Raina
            araina Ashwani Raina
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: