You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@impala.apache.org by "Philip Zeyliger (JIRA)" <ji...@apache.org> on 2018/04/13 18:19:00 UTC
[jira] [Resolved] (IMPALA-6849) Sentry failed to start in unit
tests
[ https://issues.apache.org/jira/browse/IMPALA-6849?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Philip Zeyliger resolved IMPALA-6849.
-------------------------------------
Resolution: Information Provided
Hi [~vukercegovac],
This is the signature for when the "jenkins" user is not in the "jenkins" group. It's super confusing, and [~laszlog] figured it out.
> Sentry failed to start in unit tests
> ------------------------------------
>
> Key: IMPALA-6849
> URL: https://issues.apache.org/jira/browse/IMPALA-6849
> Project: IMPALA
> Issue Type: Bug
> Components: Security
> Affects Versions: Impala 2.12.0
> Reporter: Vuk Ercegovac
> Priority: Critical
> Labels: broken-build
>
> {noformat}
> ...
> 07:07:56 --> Starting the Sentry Policy Server
> 07:09:07 Error in /data/jenkins/workspace/<test version>/repos/Impala/testdata/bin/run-all.sh at line 81: $IMPALA_HOME/testdata/bin/run-sentry-service.sh > \
> ...{noformat}
> The unit test was for s3. In the sentry startup logs, there's several retries and a problem with listing roles:
> {noformat}
> ...
> 8/04/11 07:09:05 ERROR transport.RetryClientInvocationHandler: failed to execute listRoles
> java.lang.reflect.InvocationTargetException
> at sun.reflect.GeneratedMethodAccessor1.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:606)
> at sentry.org.apache.sentry.core.common.transport.RetryClientInvocationHandler.invokeImpl(RetryClientInvocationHandler.java:95)
> at sentry.org.apache.sentry.core.common.transport.SentryClientInvocationHandler.invoke(SentryClientInvocationHandler.java:41)
> at com.sun.proxy.$Proxy0.listRoles(Unknown Source)
> at org.apache.impala.util.SentryPolicyService.listAllRoles(SentryPolicyService.java:393)
> at org.apache.impala.testutil.SentryServicePinger.main(SentryServicePinger.java:75)
> Caused by: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to jenkins. Server Stacktrace: org.apache.sentry.provider.db.SentryAccessDeniedException: Access denied to jenkins
> at org.apache.sentry.provider.db.service.thrift.SentryPolicyStoreProcessor.list_sentry_roles_by_group(SentryPolicyStoreProcessor.java:581)
> at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_roles_by_group.getResult(SentryPolicyService.java:1077)
> at org.apache.sentry.provider.db.service.thrift.SentryPolicyService$Processor$list_sentry_roles_by_group.getResult(SentryPolicyService.java:1062)
> ...{noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)