You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hbase.apache.org by "Lars George (JIRA)" <ji...@apache.org> on 2010/01/21 12:45:54 UTC
[jira] Created: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Add default jmxremote.{access|password} files into conf
-------------------------------------------------------
Key: HBASE-2152
URL: https://issues.apache.org/jira/browse/HBASE-2152
Project: Hadoop HBase
Issue Type: Improvement
Affects Versions: 0.20.4, 0.21.0
Reporter: Lars George
Assignee: Lars George
Fix For: 0.20.4, 0.21.0
Attachments: HBASE-2152.patch
If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "Lars George (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Lars George updated HBASE-2152:
-------------------------------
Attachment: HBASE-2152.patch
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "stack (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
stack updated HBASE-2152:
-------------------------
Resolution: Fixed
Fix Version/s: (was: 0.20.4)
(was: 0.21.0)
0.20.3
Status: Resolved (was: Patch Available)
Committed to branch and trunk. Thanks Lars and Gary.
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.3
>
> Attachments: HBASE-2152.patch, HBASE-2152_0.20-no_pwd.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "Gary Helmling (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Gary Helmling updated HBASE-2152:
---------------------------------
Attachment: HBASE-2152_0.20-no_pwd.patch
Here's a patch to change the hbase-env.sh comments to include a password-less remote JMX setup by default.
This seems okay to me, as it's not enabled unless uncommented, and the comments point you to how to enable password access as well.
Lars, what do you think?
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch, HBASE-2152_0.20-no_pwd.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "Lars George (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12803649#action_12803649 ]
Lars George commented on HBASE-2152:
------------------------------------
I am fine with removing it. The only reason I added it in the first place was that I followed Ed Capriolo's guide and made use of them. Given we have no passwords anywhere else it seems OK to remove them. The JMX ports are internal like the IPC ones so a user needs to have LAN access anyways. Seems good in the overall scheme of things.
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch, HBASE-2152_0.20-no_pwd.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "stack (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12803494#action_12803494 ]
stack commented on HBASE-2152:
------------------------------
The latter seems better to me (sorry if I should have spoken up earlier). What do you fellas think? There's no password access on an hbase cluster generally for the webui, etc.
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "stack (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12803462#action_12803462 ]
stack commented on HBASE-2152:
------------------------------
Sure, but can't you start jmx without requiring a login if you pass the right args? Should this be the default rather than a login?
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "stack (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12803774#action_12803774 ]
stack commented on HBASE-2152:
------------------------------
You going to commit Lars?
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch, HBASE-2152_0.20-no_pwd.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "Gary Helmling (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12803488#action_12803488 ]
Gary Helmling commented on HBASE-2152:
--------------------------------------
Yes, you can monitor local processes without a password. You can also disable password checking for remote processes by setting com.sun.management.jmxremote.authenticate=false.
It is true that the default hbase-env.sh references these files in comments:
{code}
# Uncomment and adjust/create "jmxremote.*" to enable JMX exporting
# export HBASE_JMX_BASE="-Dcom.sun.management.jmxremote.ssl=false"
# export HBASE_JMX_BASE="$HBASE_JMX_BASE -Dcom.sun.management.jmxremote.password.file=$HBASE_HOME/conf/jmxremote.password"
# export HBASE_JMX_BASE="$HBASE_JMX_BASE -Dcom.sun.management.jmxremote.access.file=$HBASE_HOME/conf/jmxremote.access"
# export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS $HBASE_JMX_BASE -Dcom.sun.management.jmxremote.port=10101"
...
{code}
So it is a bit confusing to refer to the files when they're not there by default.
We could change this to simply reference the default files in the JRE. Those will already exist with sample formats. The only problem there is that java wants the password file to only have permissions of "600" and be owned the the user account running the process. Which often won't mesh for people running hbase (JDK owned by root, Hadoop/HBase running as normal user).
So in that case, we could change the default hbase-env.sh to something like:
{code}
# Uncomment and adjust to enable JMX exporting
# See jmxremote.password and jmxremote.access in $JRE_HOME/lib/management to configure remote password access.
# More details at: http://java.sun.com/javase/6/docs/technotes/guides/management/agent.html
#
# export HBASE_JMX_BASE="-Dcom.sun.management.jmxremote.ssl=false"
# export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS $HBASE_JMX_BASE -Dcom.sun.management.jmxremote.port=10101"
...
{code}
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (HBASE-2152) Add default
jmxremote.{access|password} files into conf
Posted by "Lars George (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Lars George updated HBASE-2152:
-------------------------------
Status: Patch Available (was: Open)
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch
>
>
> If there are no objections I would like to commit these two default files. They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.