[OMID-194] OmidTableManager cannot create commit and timestamp tables in kerberos cluster

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 1.1.0
• Assignee: Rajeshbabu Chintaguntla
• Reporter: Rajeshbabu Chintaguntla
• Created: 28/Jan/21 12:44
• Updated: 17/Oct/22 08:52
• Resolved: 10/Feb/21 10:00

Description

Omid table manager cannot create commit and timestamp tables in kerberos cluster because it's not loading any configurations having keytab and principal information. So alway creation of those table failing always

[root@rajeshph-1 conf]# omid create-hbase-commit-table
WARNING: HADOOP_CONF_DIR is unset
HBASE_CONF_DIR is set to '/etc/hbase/conf'
Exception in thread "main" org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: not set from keytab not set javax.security.auth.login.LoginException: Unable to obtain password from user

	at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2015)
	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1360)
	at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1140)
	at org.apache.omid.tools.hbase.HBaseLogin.loginIfNeeded(HBaseLogin.java:42)
	at org.apache.omid.tools.hbase.OmidTableManager.executeActionsOnHBase(OmidTableManager.java:82)
	at org.apache.omid.tools.hbase.OmidTableManager.main(OmidTableManager.java:120)
Caused by: javax.security.auth.login.LoginException: Unable to obtain password from user

	at com.sun.security.auth.module.Krb5LoginModule.promptForPass(Krb5LoginModule.java:901)
	at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:764)
	at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:617)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at javax.security.auth.login.LoginContext.invoke(LoginContext.java:755)
	at javax.security.auth.login.LoginContext.access$000(LoginContext.java:195)
	at javax.security.auth.login.LoginContext$4.run(LoginContext.java:682)
	at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680)
	at java.security.AccessController.doPrivileged(Native Method)
	at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
	at javax.security.auth.login.LoginContext.login(LoginContext.java:587)
	at org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2094)
	at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2005)
	... 5 more

Issue Links

• is related to: OMID-195 Add security system tests
• is related to: OMID-199 Omid client cannot use pre-authenticated UserGroupInformation.getCurrentUser()
• links to: GitHub Pull Request #86