You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-dev@hadoop.apache.org by "Xiaoyu Yao (JIRA)" <ji...@apache.org> on 2019/02/28 03:12:00 UTC
[jira] [Created] (HDDS-1190) Fix jdk 11 issue for ozonesecure base
image and docker-compose
Xiaoyu Yao created HDDS-1190:
--------------------------------
Summary: Fix jdk 11 issue for ozonesecure base image and docker-compose
Key: HDDS-1190
URL: https://issues.apache.org/jira/browse/HDDS-1190
Project: Hadoop Distributed Data Store
Issue Type: Bug
Reporter: Xiaoyu Yao
Assignee: Xiaoyu Yao
HDDS-1019 changes to use hadoop-runner as base image for ozonesecure docker-compose. There are a few issues that need to fixed.
1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume openjdk8 for JAVA_HOME.
2. The KEYTAB_DIR needs to be quoted with '.
3. keytab based login failed with Message stream modified (41), [~elek] mentioned in HDDS-1019 that we need to add max_renewable_life to "docker-image/docker-krb5/krb5.conf" like follows.
[realms]
EXAMPLE.COM = \{
kdc = localhost
admin_server = localhost
max_renewable_life = 7d
}
Failures:
{code}
org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: scm/scm@EXAMPLE.COM from keytab /etc/security/keytabs/scm.keytab javax.security.auth.login.LoginException: Message stream modified (41)
scm_1 | at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
scm_1 |
{code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-help@hadoop.apache.org