You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@slider.apache.org by "Jonathan Maron (JIRA)" <ji...@apache.org> on 2015/11/17 23:10:11 UTC
[jira] [Commented] (SLIDER-990) The isFromKeytab check is not
always valid
[ https://issues.apache.org/jira/browse/SLIDER-990?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15009668#comment-15009668 ]
Jonathan Maron commented on SLIDER-990:
---------------------------------------
Those are exactly the sort of log statements that are indicative of 10786, so I'd suggest really reviewing whether that fix is applied.
> The isFromKeytab check is not always valid
> ------------------------------------------
>
> Key: SLIDER-990
> URL: https://issues.apache.org/jira/browse/SLIDER-990
> Project: Slider
> Issue Type: Bug
> Components: security
> Affects Versions: Slider 0.81
> Reporter: Billie Rinaldi
>
> In SliderAppMaster, we use loginUserFromKeytab and then verify that the resulting user isFromKeytab. I'm getting a failure on the isFromKeytab check. I believe that the fix for HADOOP-10786 was included in the version of Hadoop I was using. You can see the contradictory log statements below.
> {noformat}
> 2015-11-11 00:54:08,881 [main] INFO security.SecurityConfiguration - No host keytab file path specified. Will attempt to retrieve keytab file accumulo.headless.keytab as a local resource for the container
> 2015-11-11 00:54:08,881 [main] INFO appmaster.SliderAppMaster - Logging in as accumulo-test1 with keytab keytabs/accumulo.headless.keytab
> 2015-11-11 00:54:08,947 [main] INFO security.UserGroupInformation - Login successful for user accumulo-test1 using keytab file /hadoop/yarn/local/usercache/accumulo/appcache/application_1447164964705_0014/container_e02_1447164964705_0014_01_000001/keytabs/accumulo.headless.keytab
> 2015-11-11 00:54:08,947 [main] ERROR main.ServiceLauncher - User is not based on a keytab in a secure deployment.
> 2015-11-11 00:54:08,948 [main] INFO util.ExitUtil - Exiting with status 70
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)