You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Tom Beerbower (JIRA)" <ji...@apache.org> on 2016/06/15 01:23:29 UTC
[jira] [Updated] (AMBARI-17242) Atlas Integration :
atlas.authentication.principal should be set to atlas/_HOST@EXAMPLE.COM
[ https://issues.apache.org/jira/browse/AMBARI-17242?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tom Beerbower updated AMBARI-17242:
-----------------------------------
Resolution: Fixed
Status: Resolved (was: Patch Available)
> Atlas Integration : atlas.authentication.principal should be set to atlas/_HOST@EXAMPLE.COM
> -------------------------------------------------------------------------------------------
>
> Key: AMBARI-17242
> URL: https://issues.apache.org/jira/browse/AMBARI-17242
> Project: Ambari
> Issue Type: Bug
> Reporter: Tom Beerbower
> Assignee: Tom Beerbower
>
> In a kerberized env, the value of atlas.authentication.principal should be set to atlas/_HOST@EXAMPLE.COM. Currently the value is set to atlas which causes Atlas server startup to fail.
> {code}
> ######################################################################################## (Atlas:194)
> 2016-06-11 01:51:27,820 INFO - [main:] ~ >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> (Atlas:195)
> 2016-06-11 01:51:27,820 INFO - [main:] ~ Server starting with TLS ? false on port 21000 (Atlas:196)
> 2016-06-11 01:51:27,820 INFO - [main:] ~ <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< (Atlas:197)
> 2016-06-11 01:51:27,885 INFO - [main:] ~ Logging initialized @1201ms (log:186)
> 2016-06-11 01:51:28,005 INFO - [main:] ~ jetty-9.2.12.v20150709 (Server:327)
> 2016-06-11 01:51:29,022 INFO - [main:] ~ Loading Guice modules (GuiceServletConfig:65)
> 2016-06-11 01:51:29,199 WARN - [main:] ~ Failed startup of context o.e.j.w.WebAppContext@14cd1699{/,file:/usr/hdp/2.5.0.0-717/atlas/server/webapp/atlas/,STARTING}{/usr/hdp/current/atlas-server/server/webapp/atlas} (WebAppContext:514)
> java.lang.IllegalStateException: Unable to perform KERBEROS login.
> at org.apache.atlas.web.listeners.LoginProcessor.doServiceLogin(LoginProcessor.java:79)
> at org.apache.atlas.web.listeners.LoginProcessor.login(LoginProcessor.java:58)
> at org.apache.atlas.web.listeners.GuiceServletConfig.getInjector(GuiceServletConfig.java:76)
> at com.google.inject.servlet.GuiceServletContextListener.contextInitialized(GuiceServletContextListener.java:47)
> at org.apache.atlas.web.listeners.GuiceServletConfig.contextInitialized(GuiceServletConfig.java:132)
> at org.eclipse.jetty.server.handler.ContextHandler.callContextInitialized(ContextHandler.java:800)
> at org.eclipse.jetty.servlet.ServletContextHandler.callContextInitialized(ServletContextHandler.java:444)
> at org.eclipse.jetty.server.handler.ContextHandler.startContext(ContextHandler.java:791)
> at org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:294)
> at org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1349)
> at org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1342)
> at org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:741)
> at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:505)
> at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
> at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:132)
> at org.eclipse.jetty.server.Server.start(Server.java:387)
> at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:114)
> at org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:61)
> at org.eclipse.jetty.server.Server.doStart(Server.java:354)
> at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
> at org.apache.atlas.web.service.EmbeddedServer.start(EmbeddedServer.java:93)
> at org.apache.atlas.Atlas.main(Atlas.java:113)
> Caused by: java.io.IOException: Login failure for atlas from keytab /etc/security/keytabs/atlas.service.keytab: javax.security.auth.login.LoginException: Unable to obtain password from user
>
> at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:987)
> at org.apache.atlas.web.listeners.LoginProcessor.doServiceLogin(LoginProcessor.java:73)
> ... 21 more
> Caused by: javax.security.auth.login.LoginException: Unable to obtain password from user
>
> at com.sun.security.auth.module.Krb5LoginModule.promptForPass(Krb5LoginModule.java:897)
> at com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:760)
> at com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:617)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:497)
> at javax.security.auth.login.LoginContext.invoke(LoginContext.java:755)
> at javax.security.auth.login.LoginContext.access$000(LoginContext.java:195)
> at javax.security.auth.login.LoginContext$4.run(LoginContext.java:682)
> at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680)
> at java.security.AccessController.doPrivileged(Native Method)
> at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
> at javax.security.auth.login.LoginContext.login(LoginContext.java:587)
> at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:978)
> ... 22 more
> 2016-06-11 01:51:29,214 INFO - [main:] ~ Started ServerConnector@771adfcb{HTTP/1.1}{0.0.0.0:21000} (ServerConnector:266)
> 2016-06-11 01:51:29,214 INFO - [main:] ~ Started @2533ms (Server:379)
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)