[jira] [Created] (AMBARI-22819) Post disabling the kerberos Ambari is not removing jaas conf of storm service

["Sandeep Nemuri (JIRA)" <ji...@apache.org>]

Sandeep Nemuri created AMBARI-22819:
---------------------------------------

             Summary: Post disabling the kerberos Ambari is not removing jaas conf of storm service
                 Key: AMBARI-22819
                 URL: https://issues.apache.org/jira/browse/AMBARI-22819
             Project: Ambari
          Issue Type: Bug
          Components: security
    Affects Versions: 2.5.1
            Reporter: Sandeep Nemuri


Post disabling the kerberos Ambari is not deleting the storm_jaas.conf and client_jaas.conf files from storm conf directory.

Offset lag section in Storm UI is not populating because of the jaas conf.

{code}
Unable to get offset lags for kafka. Reason: org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = AuthFailed for /brokers/topics/hortonworks/partitions at org.apache.zookeeper.KeeperException.create(KeeperException.java:123) at org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at org.apache.zookeeper.ZooKeeper.getChildren(ZooKeeper.java:1590) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:230) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:219) at org.apache.curator.shaded.RetryLoop.callWithRetry(RetryLoop.java:109) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.pathInForeground(GetChildrenBuilderImpl.java:216) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:207) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:40) at org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getLeadersAndTopicPartitions(KafkaOffsetLagUtil.java:323) at org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getOffsetLags(KafkaOffsetLagUtil.java:257) at org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.main(KafkaOffsetLagUtil.java:126)

{code}

Storm's /usr/hdp/current/storm-client/bin/storm-kafka-monitor checks if the storm_jaas.conf exists in storm configuration directory and then uses it.

{code:java}
STORM_JAAS_CONF_PARAM=""
JAAS_FILE="${STORM_CONF_DIR}/storm_jaas.conf"
if [ -f $JAAS_FILE ]; then
 STORM_JAAS_CONF_PARAM="-Djava.security.auth.login.config=${JAAS_FILE}"
fi
{code}

Issue will be resolved if we delete the storm_jaas.conf file manually.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)