You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Philip Zeyliger (JIRA)" <ji...@apache.org> on 2018/04/13 18:19:00 UTC

[jira] [Resolved] (IMPALA-6849) Sentry failed to start in unit tests

     [ https://issues.apache.org/jira/browse/IMPALA-6849?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Philip Zeyliger resolved IMPALA-6849.
-------------------------------------
    Resolution: Information Provided

Hi [~vukercegovac],

This is the signature for when the "jenkins" user is not in the "jenkins" group. It's super confusing, and [~laszlog] figured it out.



> Sentry failed to start in unit tests
> ------------------------------------
>
>                 Key: IMPALA-6849
>                 URL: https://issues.apache.org/jira/browse/IMPALA-6849
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: Impala 2.12.0
>            Reporter: Vuk Ercegovac
>            Priority: Critical
>              Labels: broken-build
>
> {noformat}
> ...
> 07:07:56  --> Starting the Sentry Policy Server
> 07:09:07 Error in /data/jenkins/workspace/<test version>/repos/Impala/testdata/bin/run-all.sh at line 81: $IMPALA_HOME/testdata/bin/run-sentry-service.sh > \
> ...{noformat}
> The unit test was for s3. In the sentry startup logs, there's several retries and a problem with listing roles:
> {noformat}
> ...
> 8/04/11 07:09:05 ERROR transport.RetryClientInvocationHandler: failed to execute listRoles
> java.lang.reflect.InvocationTargetException
> at sun.reflect.GeneratedMethodAccessor1.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at sentry.org.apache.sentry.core.common.transport.RetryClientInvocationHandler.invokeImpl(RetryClientInvocationHandler.java:95)
> at sentry.org.apache.sentry.core.common.transport.SentryClientInvocationHandler.invoke(SentryClientInvocationHandler.java:41)
> at com.sun.proxy.$Proxy0.listRoles(Unknown Source)
> at org.apache.impala.util.SentryPolicyService.listAllRoles(SentryPolicyService.java:393)
> at org.apache.impala.testutil.SentryServicePinger.main(SentryServicePinger.java:75)
> Caused by: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to jenkins. Server Stacktrace: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to jenkins
> at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessor.list_sentry_roles_by_group(SentryPolicyStoreProcessor.java:581)
> at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_roles_by_group.getResult(SentryPolicyService.java:1077)
> at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_roles_by_group.getResult(SentryPolicyService.java:1062)
> ...{noformat}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)