You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Allen Wittenauer (JIRA)" <ji...@apache.org> on 2010/03/19 21:44:27 UTC
[jira] Commented: (HADOOP-6647) balancer fails with "is not
authorized for protocol interface NamenodeProtocol" in secure environment
[ https://issues.apache.org/jira/browse/HADOOP-6647?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12847566#action_12847566 ]
Allen Wittenauer commented on HADOOP-6647:
------------------------------------------
Does that mean if I create a fake realm with the same short name I can run balancer?
> balancer fails with "is not authorized for protocol interface NamenodeProtocol" in secure environment
> -----------------------------------------------------------------------------------------------------
>
> Key: HADOOP-6647
> URL: https://issues.apache.org/jira/browse/HADOOP-6647
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Boris Shkolnik
> Attachments: HADOOP-6647-BP20.patch
>
>
> user logs in as hdfs/something@something and tries to run balancer.
> balancer is using NameNode Protocol which authorizes based on server principal key.
> but NameNode key is hdfs/_HOST@.. now. so it fails.
> To fix we need to compare the short names only.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.