Stacktrace java.lang.reflect.UndeclaredThrowableException: null at java.util.concurrent.FutureTask$Sync.innerGet(FutureTask.java:262) at java.util.concurrent.FutureTask.get(FutureTask.java:119) at org.apache.hadoop.registry.secure.TestSecureRMRegistryOperations$1.run(TestSecureRMRegistryOperations.java:107) at org.apache.hadoop.registry.secure.TestSecureRMRegistryOperations$1.run(TestSecureRMRegistryOperations.java:98) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:415) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866) at org.apache.hadoop.registry.secure.TestSecureRMRegistryOperations.startRMRegistryOperations(TestSecureRMRegistryOperations.java:97) at org.apache.hadoop.registry.secure.TestSecureRMRegistryOperations.testUserHomedirsPermissionsRestricted(TestSecureRMRegistryOperations.java:255) Caused by: org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Failed to create root paths {org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users}; diagnostics={ Connection="test-testUserHomedirsPermissionsRestricted reachable at "localhost:41791" " root="/registry" secure cluster; secure registry; Curator service access policy: sasl; System ACLs: 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM User: zookeeper@EXAMPLE.COM: zookeeper@EXAMPLE.COM (auth:KERBEROS) hasKerberosCredentials=true isFromKeytab=true kerberos is enabled in Hadoop =true; Kerberos Realm: EXAMPLE.COM; java.security.auth.login.config=/grid/0/nobody/workspace/build-support/SOURCES/hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/jaas.txt; zookeeper.sasl.client=true; JAAS Client Identity=zookeeper; hadoop.registry.jaas.context=zookeeper; Principal = null; Keytab = null; ; zookeeper.sasl.client.username=(undefined); zookeeper.sasl.clientconfig=zookeeper; zookeeper.allowSaslFailedClients=true; zookeeper.maintain_connection_despite_sasl_failure=false} current registry is: {ZK tree for /registry }: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users at org.apache.hadoop.registry.server.services.RegistryAdminService.createRootRegistryPaths(RegistryAdminService.java:299) at org.apache.hadoop.registry.server.services.RegistryAdminService.access$100(RegistryAdminService.java:79) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:245) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:242) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:722) Caused by: org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users at org.apache.hadoop.registry.client.impl.zk.CuratorService.operationFailure(CuratorService.java:385) at org.apache.hadoop.registry.client.impl.zk.CuratorService.zkMkPath(CuratorService.java:559) at org.apache.hadoop.registry.client.impl.zk.CuratorService.maybeCreate(CuratorService.java:435) at org.apache.hadoop.registry.server.services.RegistryAdminService.createRootRegistryPaths(RegistryAdminService.java:280) at org.apache.hadoop.registry.server.services.RegistryAdminService.access$100(RegistryAdminService.java:79) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:245) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:242) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:722) Caused by: org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /registry/users at org.apache.zookeeper.KeeperException.create(KeeperException.java:113) at org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783) at org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:691) at org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:675) at org.apache.curator.RetryLoop.callWithRetry(RetryLoop.java:107) at org.apache.curator.framework.imps.CreateBuilderImpl.pathInForeground(CreateBuilderImpl.java:672) at org.apache.curator.framework.imps.CreateBuilderImpl.protectedPathInForeground(CreateBuilderImpl.java:453) at org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:443) at org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:423) at org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:44) at org.apache.hadoop.registry.client.impl.zk.CuratorService.zkMkPath(CuratorService.java:551) at org.apache.hadoop.registry.client.impl.zk.CuratorService.maybeCreate(CuratorService.java:435) at org.apache.hadoop.registry.server.services.RegistryAdminService.createRootRegistryPaths(RegistryAdminService.java:280) at org.apache.hadoop.registry.server.services.RegistryAdminService.access$100(RegistryAdminService.java:79) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:245) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:242) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:722) Standard Output 2017-02-20 21:26:05,858 [JUnit] INFO secure.AbstractSecureRegistryTest (AbstractSecureRegistryTest.java:login(335)) - Logging in as zookeeper/localhost in context ZOOKEEPER_SERVER with keytab target/kdc/zookeeper.keytab Debug is true storeKey true useTicketCache true useKeyTab true doNotPrompt true ticketCache is null isInitiator true KeyTab is /grid/0/nobody/workspace/build-support/SOURCES/hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/zookeeper.keytab refreshKrb5Config is true principal is zookeeper/localhost tryFirstPass is false useFirstPass is false storePass is false clearPass is false Refreshing Kerberos configuration Acquire TGT from Cache Principal is zookeeper/localhost@EXAMPLE.COM null credentials from Ticket Cache principal is zookeeper/localhost@EXAMPLE.COM Will use keytab Commit Succeeded 2017-02-20 21:26:05,895 [JUnit] DEBUG service.AbstractService (AbstractService.java:enterState(452)) - Service: test-testUserHomedirsPermissionsRestricted entered state INITED 2017-02-20 21:26:05,895 [JUnit] INFO secure.AbstractSecureRegistryTest (AbstractSecureRegistryTest.java:createSecureZKInstance(289)) - 2017-02-20 21:26:05,896 [JUnit] INFO server.ZooKeeperServer (ZooKeeperServer.java:setTickTime(755)) - tickTime set to 3000 2017-02-20 21:26:05,896 [JUnit] INFO services.MicroZookeeperService (MicroZookeeperService.java:serviceStart(235)) - Starting Local Zookeeper service Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt true ticketCache is null isInitiator true KeyTab is /grid/0/nobody/workspace/build-support/SOURCES/hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/zookeeper.keytab refreshKrb5Config is false principal is zookeeper/localhost tryFirstPass is false useFirstPass is false storePass is false clearPass is false principal is zookeeper/localhost@EXAMPLE.COM Will use keytab Commit Succeeded 2017-02-20 21:26:05,909 [JUnit] INFO zookeeper.Login (Login.java:login(294)) - successfully logged in. 2017-02-20 21:26:05,909 [Thread-7] INFO zookeeper.Login (Login.java:run(127)) - TGT refresh thread started. 2017-02-20 21:26:05,909 [JUnit] INFO server.NIOServerCnxnFactory (NIOServerCnxnFactory.java:configure(94)) - binding to port localhost/127.0.0.1:0 2017-02-20 21:26:05,912 [JUnit] INFO services.MicroZookeeperService (MicroZookeeperService.java:serviceStart(241)) - In memory ZK started at localhost:41791 2017-02-20 21:26:05,912 [JUnit] DEBUG service.AbstractService (AbstractService.java:start(197)) - Service test-testUserHomedirsPermissionsRestricted is started 2017-02-20 21:26:05,912 [Thread-7] INFO zookeeper.Login (Login.java:getRefreshTime(302)) - TGT valid starting at: Mon Feb 20 21:26:05 UTC 2017 2017-02-20 21:26:05,912 [Thread-7] INFO zookeeper.Login (Login.java:getRefreshTime(303)) - TGT expires: Tue Feb 21 21:26:05 UTC 2017 2017-02-20 21:26:05,912 [Thread-7] INFO zookeeper.Login (Login.java:run(181)) - TGT refresh sleeping until: Tue Feb 21 17:18:53 UTC 2017 2017-02-20 21:26:05,934 [JUnit] INFO registry.RegistryTestHelper (RegistryTestHelper.java:loginUGI(331)) - Logging in as zookeeper from target/kdc/zookeeper.keytab Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt true ticketCache is null isInitiator true KeyTab is /grid/0/nobody/workspace/build-support/SOURCES/hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/zookeeper.keytab refreshKrb5Config is true principal is zookeeper tryFirstPass is false useFirstPass is false storePass is false clearPass is false Refreshing Kerberos configuration principal is zookeeper@EXAMPLE.COM Will use keytab 2017-02-20 21:26:05,945 [JUnit] DEBUG security.UserGroupInformation (UserGroupInformation.java:login(247)) - hadoop login Commit Succeeded 2017-02-20 21:26:05,946 [JUnit] DEBUG security.UserGroupInformation (UserGroupInformation.java:commit(182)) - hadoop login commit 2017-02-20 21:26:05,946 [JUnit] DEBUG security.UserGroupInformation (UserGroupInformation.java:commit(196)) - using kerberos user:zookeeper@EXAMPLE.COM 2017-02-20 21:26:05,946 [JUnit] DEBUG security.UserGroupInformation (UserGroupInformation.java:commit(218)) - Using user: "zookeeper@EXAMPLE.COM" with name zookeeper@EXAMPLE.COM 2017-02-20 21:26:05,946 [JUnit] DEBUG security.UserGroupInformation (UserGroupInformation.java:commit(228)) - User entry: "zookeeper@EXAMPLE.COM" 2017-02-20 21:26:05,947 [JUnit] DEBUG security.UserGroupInformation (UserGroupInformation.java:logPrivilegedAction(1893)) - PrivilegedAction as:zookeeper@EXAMPLE.COM (auth:KERBEROS) from:org.apache.hadoop.registry.secure.TestSecureRMRegistryOperations.startRMRegistryOperations(TestSecureRMRegistryOperations.java:97) 2017-02-20 21:26:05,947 [JUnit] DEBUG service.CompositeService (CompositeService.java:addService(73)) - Adding service rmregistry 2017-02-20 21:26:05,947 [JUnit] DEBUG service.AbstractService (AbstractService.java:enterState(452)) - Service: rmregistry entered state INITED 2017-02-20 21:26:05,947 [JUnit] DEBUG service.CompositeService (CompositeService.java:addService(73)) - Adding service registry security 2017-02-20 21:26:05,947 [JUnit] DEBUG service.CompositeService (CompositeService.java:serviceInit(104)) - rmregistry: initing services, size=1 2017-02-20 21:26:05,947 [JUnit] DEBUG service.AbstractService (AbstractService.java:enterState(452)) - Service: registry security entered state INITED 2017-02-20 21:26:05,949 [JUnit] INFO services.RegistryAdminService (RegistryAdminService.java:serviceInit(218)) - Registry System ACLs: 2017-02-20 21:26:05,949 [JUnit] INFO secure.TestSecureRMRegistryOperations (TestSecureRMRegistryOperations.java:run(105)) - Connection="null" root="/registry" 2017-02-20 21:26:05,949 [JUnit] DEBUG service.CompositeService (CompositeService.java:serviceStart(115)) - rmregistry: starting services, size=1 2017-02-20 21:26:05,949 [JUnit] DEBUG service.AbstractService (AbstractService.java:start(197)) - Service registry security is started 2017-02-20 21:26:05,949 [JUnit] INFO zk.RegistrySecurity (RegistrySecurity.java:applySecurityEnvironment(735)) - Enabling ZK sasl client: jaasClientEntry = zookeeper, principal = null, keytab = null 2017-02-20 21:26:05,951 [JUnit] INFO zookeeper.ZooKeeper (ZooKeeper.java:(438)) - Initiating client connection, connectString=localhost:41791 sessionTimeout=60000 watcher=org.apache.curator.ConnectionState@6f8ed676 2017-02-20 21:26:05,952 [JUnit] DEBUG service.AbstractService (AbstractService.java:start(197)) - Service rmregistry is started Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is true principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false Refreshing Kerberos configuration Key for the principal nobody@EXAMPLE.COM not available in default key tab 2017-02-20 21:26:05,953 [JUnit-SendThread(localhost:41791)] WARN client.ZooKeeperSaslClient (ZooKeeperSaslClient.java:handle(496)) - Could not login: the client is being asked for a password, but the Zookeeper client code does not currently support obtaining a password from the user. Make sure that the client is configured to use a ticket cache (using the JAAS configuration setting 'useTicketCache=true)' and restart the client. If you still get this message after that, the TGT in the ticket cache has expired and must be manually refreshed. To do so, first determine if you are using a password or a keytab. If the former, run kinit in a Unix shell in the environment of the user who is running this Zookeeper client using the command 'kinit ' (where is the name of the client's Kerberos principal). If the latter, do 'kinit -k -t ' (where is the name of the Kerberos principal, and is the location of the keytab file). After manually refreshing your cache, restart this client. If you continue to see this message after manually refreshing your cache, ensure that your KDC host's clock is in sync with this host's clock. [Krb5LoginModule] user entered username: nobody 2017-02-20 21:26:05,953 [RegistryAdminService 1] INFO services.RegistryAdminService (RegistryAdminService.java:createRootRegistryPaths(277)) - System ACLs 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 2017-02-20 21:26:05,957 [NioProcessor-2] ERROR server.KERBEROS_LOG (AuthenticationService.java:getClientEntry(187)) - Error while searching for client nobody@EXAMPLE.COM : Client not found in Kerberos database [Krb5LoginModule] authentication failed Client not found in Kerberos database (6) - Client not found in Kerberos database 2017-02-20 21:26:05,958 [JUnit-SendThread(localhost:41791)] WARN zookeeper.ClientCnxn (ClientCnxn.java:startConnect(1001)) - SASL configuration failed: javax.security.auth.login.LoginException: Client not found in Kerberos database (6) - Client not found in Kerberos database Will continue connection to Zookeeper server without SASL authentication, if Zookeeper server allows it. 2017-02-20 21:26:05,958 [JUnit-SendThread(localhost:41791)] INFO zookeeper.ClientCnxn (ClientCnxn.java:logStartConnect(1019)) - Opening socket connection to server localhost/127.0.0.1:41791 2017-02-20 21:26:05,958 [JUnit-EventThread] ERROR curator.ConnectionState (ConnectionState.java:checkState(244)) - Authentication failed 2017-02-20 21:26:05,959 [JUnit-SendThread(localhost:41791)] INFO zookeeper.ClientCnxn (ClientCnxn.java:primeConnection(864)) - Socket connection established to localhost/127.0.0.1:41791, initiating session 2017-02-20 21:26:05,959 [NIOServerCxn.Factory:localhost/127.0.0.1:0] INFO server.NIOServerCnxnFactory (NIOServerCnxnFactory.java:run(197)) - Accepted socket connection from /127.0.0.1:58218 2017-02-20 21:26:05,959 [JUnit-SendThread(localhost:41791)] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:primeConnection(936)) - Session establishment request sent on localhost/127.0.0.1:41791 Found KeyTab Found KerberosKey for zookeeper/localhost@EXAMPLE.COM Found KerberosKey for zookeeper/localhost@EXAMPLE.COM Found KerberosKey for zookeeper/localhost@EXAMPLE.COM Found KerberosKey for zookeeper/localhost@EXAMPLE.COM 2017-02-20 21:26:05,962 [NIOServerCxn.Factory:localhost/127.0.0.1:0] INFO server.ZooKeeperServer (ZooKeeperServer.java:processConnectRequest(868)) - Client attempting to establish new session at /127.0.0.1:58218 2017-02-20 21:26:05,963 [SyncThread:0] INFO persistence.FileTxnLog (FileTxnLog.java:append(199)) - Creating new log file: log.1 2017-02-20 21:26:05,964 [SyncThread:0] INFO server.ZooKeeperServer (ZooKeeperServer.java:finishSessionInit(617)) - Established session 0x15a5d6ad1560000 with negotiated timeout 60000 for client /127.0.0.1:58218 2017-02-20 21:26:05,964 [JUnit-SendThread(localhost:41791)] INFO zookeeper.ClientCnxn (ClientCnxn.java:onConnected(1279)) - Session establishment complete on server localhost/127.0.0.1:41791, sessionid = 0x15a5d6ad1560000, negotiated timeout = 60000 2017-02-20 21:26:05,967 [JUnit-SendThread(localhost:41791)] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:readResponse(830)) - Reading reply sessionid:0x15a5d6ad1560000, packet:: clientPath:null serverPath:null finished:false header:: 1,1 replyHeader:: 1,2,0 request:: '/registry,#3137322e32372e33362e313330,v{s{1,s{'world,'anyone}},s{31,s{'sasl,'zookeeper@EXAMPLE.COM}},s{31,s{'sasl,'zookeeper@EXAMPLE.COM}},s{31,s{'sasl,'zookeeper@EXAMPLE.COM}}},0 response:: '/registry 2017-02-20 21:26:05,968 [ProcessThread(sid:0 cport:-1):] INFO server.PrepRequestProcessor (PrepRequestProcessor.java:pRequest(645)) - Got user-level KeeperException when processing sessionid:0x15a5d6ad1560000 type:create cxid:0x2 zxid:0x3 txntype:-1 reqpath:n/a Error Path:null Error:KeeperErrorCode = NoAuth 2017-02-20 21:26:05,969 [JUnit-SendThread(localhost:41791)] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:readResponse(830)) - Reading reply sessionid:0x15a5d6ad1560000, packet:: clientPath:null serverPath:null finished:false header:: 2,1 replyHeader:: 2,3,-102 request:: '/registry/users,#3137322e32372e33362e313330,v{s{1,s{'world,'anyone}},s{31,s{'sasl,'zookeeper@EXAMPLE.COM}},s{31,s{'sasl,'zookeeper@EXAMPLE.COM}},s{31,s{'sasl,'zookeeper@EXAMPLE.COM}}},0 response:: 2017-02-20 21:26:05,971 [JUnit-SendThread(localhost:41791)] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:readResponse(830)) - Reading reply sessionid:0x15a5d6ad1560000, packet:: clientPath:null serverPath:null finished:false header:: 3,12 replyHeader:: 3,3,0 request:: '/registry,F response:: v{},s{2,2,1487625965965,1487625965965,0,0,0,0,13,0,2} 2017-02-20 21:26:05,971 [RegistryAdminService 1] ERROR services.RegistryAdminService (RegistryAdminService.java:createRootRegistryPaths(296)) - Failure org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users at org.apache.hadoop.registry.client.impl.zk.CuratorService.operationFailure(CuratorService.java:385) at org.apache.hadoop.registry.client.impl.zk.CuratorService.zkMkPath(CuratorService.java:559) at org.apache.hadoop.registry.client.impl.zk.CuratorService.maybeCreate(CuratorService.java:435) at org.apache.hadoop.registry.server.services.RegistryAdminService.createRootRegistryPaths(RegistryAdminService.java:280) at org.apache.hadoop.registry.server.services.RegistryAdminService.access$100(RegistryAdminService.java:79) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:245) at org.apache.hadoop.registry.server.services.RegistryAdminService$3.call(RegistryAdminService.java:242) at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334) at java.util.concurrent.FutureTask.run(FutureTask.java:166) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) at java.lang.Thread.run(Thread.java:722) Caused by: org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /registry/users at org.apache.zookeeper.KeeperException.create(KeeperException.java:113) at org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at org.apache.zookeeper.ZooKeeper.create(ZooKeeper.java:783) at org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:691) at org.apache.curator.framework.imps.CreateBuilderImpl$11.call(CreateBuilderImpl.java:675) at org.apache.curator.RetryLoop.callWithRetry(RetryLoop.java:107) at org.apache.curator.framework.imps.CreateBuilderImpl.pathInForeground(CreateBuilderImpl.java:672) at org.apache.curator.framework.imps.CreateBuilderImpl.protectedPathInForeground(CreateBuilderImpl.java:453) at org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:443) at org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:423) at org.apache.curator.framework.imps.CreateBuilderImpl.forPath(CreateBuilderImpl.java:44) at org.apache.hadoop.registry.client.impl.zk.CuratorService.zkMkPath(CuratorService.java:551) ... 10 more 2017-02-20 21:26:05,972 [RegistryAdminService 1] ERROR services.RegistryAdminService (RegistryAdminService.java:createRootRegistryPaths(297)) - Failed to create root paths {org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users}; diagnostics={ Connection="test-testUserHomedirsPermissionsRestricted reachable at "localhost:41791" " root="/registry" secure cluster; secure registry; Curator service access policy: sasl; System ACLs: 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM User: zookeeper@EXAMPLE.COM: zookeeper@EXAMPLE.COM (auth:KERBEROS) hasKerberosCredentials=true isFromKeytab=true kerberos is enabled in Hadoop =true; Kerberos Realm: EXAMPLE.COM; java.security.auth.login.config=/grid/0/nobody/workspace/build-support/SOURCES/hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/jaas.txt; zookeeper.sasl.client=true; JAAS Client Identity=zookeeper; hadoop.registry.jaas.context=zookeeper; Principal = null; Keytab = null; ; zookeeper.sasl.client.username=(undefined); zookeeper.sasl.clientconfig=zookeeper; zookeeper.allowSaslFailedClients=true; zookeeper.maintain_connection_despite_sasl_failure=false} current registry is: {ZK tree for /registry } 2017-02-20 21:26:05,972 [JUnit] DEBUG security.UserGroupInformation (UserGroupInformation.java:doAs(1870)) - PrivilegedActionException as:zookeeper@EXAMPLE.COM (auth:KERBEROS) cause:java.util.concurrent.ExecutionException: org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Failed to create root paths {org.apache.hadoop.registry.client.exceptions.NoPathPermissionsException: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users}; diagnostics={ Connection="test-testUserHomedirsPermissionsRestricted reachable at "localhost:41791" " root="/registry" secure cluster; secure registry; Curator service access policy: sasl; System ACLs: 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM User: zookeeper@EXAMPLE.COM: zookeeper@EXAMPLE.COM (auth:KERBEROS) hasKerberosCredentials=true isFromKeytab=true kerberos is enabled in Hadoop =true; Kerberos Realm: EXAMPLE.COM; java.security.auth.login.config=/grid/0/nobody/workspace/build-support/SOURCES/hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/jaas.txt; zookeeper.sasl.client=true; JAAS Client Identity=zookeeper; hadoop.registry.jaas.context=zookeeper; Principal = null; Keytab = null; ; zookeeper.sasl.client.username=(undefined); zookeeper.sasl.clientconfig=zookeeper; zookeeper.allowSaslFailedClients=true; zookeeper.maintain_connection_despite_sasl_failure=false} current registry is: {ZK tree for /registry }: `/registry/users': Not authorized to access path; ACLs: [ 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM ]: KeeperErrorCode = NoAuth for /registry/users 2017-02-20 21:26:05,972 [JUnit] INFO secure.AbstractSecureRegistryTest (RegistryTestHelper.java:describe(300)) - ======================================= 2017-02-20 21:26:05,973 [JUnit] INFO secure.AbstractSecureRegistryTest (RegistryTestHelper.java:describe(301)) - teardown of instance 2017-02-20 21:26:05,973 [JUnit] INFO secure.AbstractSecureRegistryTest (RegistryTestHelper.java:describe(302)) - ======================================= 2017-02-20 21:26:05,973 [JUnit] DEBUG service.AbstractService (AbstractService.java:enterState(452)) - Service: teardown entered state STOPPED 2017-02-20 21:26:05,973 [JUnit] DEBUG service.CompositeService (CompositeService.java:serviceStop(129)) - teardown: stopping services, size=1 2017-02-20 21:26:05,973 [JUnit] DEBUG service.CompositeService (CompositeService.java:stop(151)) - Stopping service #0: Service rmregistry in state rmregistry: STARTED Connection="test-testUserHomedirsPermissionsRestricted reachable at "localhost:41791" " root="/registry" secure cluster; secure registry; Curator service access policy: sasl; System ACLs: 0x01: 'world,'anyone 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM 0x1f: 'sasl,'zookeeper@EXAMPLE.COM User: zookeeper@EXAMPLE.COM: zookeeper@EXAMPLE.COM (auth:KERBEROS) hasKerberosCredentials=true isFromKeytab=true kerberos is enabled in Hadoop =true; Kerberos Realm: EXAMPLE.COM; java.security.auth.login.config=/grid/0/nobody/workspace/build-support/SOURCES/hadoop/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/jaas.txt; zookeeper.sasl.client=true; JAAS Client Identity=zookeeper; hadoop.registry.jaas.context=zookeeper; Principal = null; Keytab = null; ; zookeeper.sasl.client.username=(undefined); zookeeper.sasl.clientconfig=zookeeper; zookeeper.allowSaslFailedClients=true; zookeeper.maintain_connection_despite_sasl_failure=false 2017-02-20 21:26:05,973 [JUnit] DEBUG service.AbstractService (AbstractService.java:enterState(452)) - Service: rmregistry entered state STOPPED 2017-02-20 21:26:05,974 [JUnit] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:close(1350)) - Closing client for session: 0x15a5d6ad1560000 2017-02-20 21:26:05,974 [ProcessThread(sid:0 cport:-1):] INFO server.PrepRequestProcessor (PrepRequestProcessor.java:pRequest2Txn(494)) - Processed session termination for sessionid: 0x15a5d6ad1560000 2017-02-20 21:26:05,975 [JUnit-SendThread(localhost:41791)] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:readResponse(830)) - Reading reply sessionid:0x15a5d6ad1560000, packet:: clientPath:null serverPath:null finished:false header:: 4,-11 replyHeader:: 4,4,0 request:: null response:: null 2017-02-20 21:26:05,975 [NIOServerCxn.Factory:localhost/127.0.0.1:0] INFO server.NIOServerCnxn (NIOServerCnxn.java:closeSock(1008)) - Closed socket connection for client /127.0.0.1:58218 which had sessionid 0x15a5d6ad1560000 2017-02-20 21:26:05,975 [JUnit] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:disconnect(1334)) - Disconnecting client for session: 0x15a5d6ad1560000 2017-02-20 21:26:05,976 [JUnit-SendThread(localhost:41791)] DEBUG zookeeper.ClientCnxn (ClientCnxn.java:run(1130)) - An exception was thrown while closing send thread for session 0x15a5d6ad1560000 : Unable to read additional data from server sessionid 0x15a5d6ad1560000, likely server has closed socket 2017-02-20 21:26:05,976 [JUnit-EventThread] INFO zookeeper.ClientCnxn (ClientCnxn.java:run(524)) - EventThread shut down 2017-02-20 21:26:05,976 [JUnit] INFO zookeeper.ZooKeeper (ZooKeeper.java:close(684)) - Session: 0x15a5d6ad1560000 closed 2017-02-20 21:26:05,976 [JUnit] DEBUG service.CompositeService (CompositeService.java:serviceStop(129)) - rmregistry: stopping services, size=1 2017-02-20 21:26:05,976 [JUnit] DEBUG service.CompositeService (CompositeService.java:stop(151)) - Stopping service #0: Service registry security in state registry security: STARTED 2017-02-20 21:26:05,977 [JUnit] DEBUG service.AbstractService (AbstractService.java:enterState(452)) - Service: registry security entered state STOPPED 2017-02-20 21:26:05,977 [JUnit] DEBUG service.AbstractService (AbstractService.java:enterState(452)) - Service: test-testUserHomedirsPermissionsRestricted entered state STOPPED 2017-02-20 21:26:05,977 [NIOServerCxn.Factory:localhost/127.0.0.1:0] INFO server.NIOServerCnxnFactory (NIOServerCnxnFactory.java:run(224)) - NIOServerCnxn factory exited run method 2017-02-20 21:26:05,977 [Thread-7] WARN zookeeper.Login (Login.java:run(185)) - TGT renewal thread has been interrupted and will exit. 2017-02-20 21:26:05,978 [JUnit] INFO server.ZooKeeperServer (ZooKeeperServer.java:shutdown(441)) - shutting down 2017-02-20 21:26:05,978 [JUnit] INFO server.SessionTrackerImpl (SessionTrackerImpl.java:shutdown(225)) - Shutting down 2017-02-20 21:26:05,978 [JUnit] INFO server.PrepRequestProcessor (PrepRequestProcessor.java:shutdown(761)) - Shutting down 2017-02-20 21:26:05,978 [JUnit] INFO server.SyncRequestProcessor (SyncRequestProcessor.java:shutdown(209)) - Shutting down 2017-02-20 21:26:05,978 [ProcessThread(sid:0 cport:-1):] INFO server.PrepRequestProcessor (PrepRequestProcessor.java:run(143)) - PrepRequestProcessor exited loop! 2017-02-20 21:26:05,978 [SyncThread:0] INFO server.SyncRequestProcessor (SyncRequestProcessor.java:run(187)) - SyncRequestProcessor exited! 2017-02-20 21:26:05,978 [JUnit] INFO server.FinalRequestProcessor (FinalRequestProcessor.java:shutdown(415)) - shutdown of request processor complete [Krb5LoginModule]: Entering logout [Krb5LoginModule]: logged out Subject