You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-user@hadoop.apache.org by Manoj Samel <ma...@gmail.com> on 2013/12/31 23:59:43 UTC
Secondary name node error in checkpoint with Kerberos enabled
* Name node and secondary name nodes on different machines
* Kerberos was just enabled
* Cloudera CDH 4.5 on Centos
*Secondary name node log (HOST2) shows following*
2013-12-31 22:00:11,728 ERROR
org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException
as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS)
cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException:
Image transfer servlet at
http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235failed
with status code 403
Response message:
Only Namenode, Secondary Namenode, and administrators may access this
servlet
*Name Node Log (HOST1) shows following*
2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server:
Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE)
2013-12-31 21:59:56,213 INFO
SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager:
Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for
protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol
...
2013-12-31 21:59:56,612 INFO
org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet
rejecting: hdfs/2NN-host@REALM
2013-12-31 21:59:56,615 WARN
org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received
non-NN/SNN/administrator request for image or edits from
hdfs/2NN-host@REALMat 2NN-host-IP
--
Thanks,
Manoj
Re: Secondary name node error in checkpoint with Kerberos enabled
Posted by li...@gmail.com.
13201614174
Qdfdhsgdgshagsydyffg
As sfgswzv
Fftdtf
发自我的 iPad
> 在 佛历2557年1月1日，上午6:59，Manoj Samel <ma...@gmail.com> 写道：
>
> * Name node and secondary name nodes on different machines
> * Kerberos was just enabled
> * Cloudera CDH 4.5 on Centos
>
> Secondary name node log (HOST2) shows following
>
>
> 2013-12-31 22:00:11,728 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS) cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException: Image transfer servlet at http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235 failed with status code 403
> Response message:
> Only Namenode, Secondary Namenode, and administrators may access this servlet
>
> Name Node Log (HOST1) shows following
>
> 2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE)
> 2013-12-31 21:59:56,213 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol
>
> ...
> 2013-12-31 21:59:56,612 INFO org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet rejecting: hdfs/2NN-host@REALM
> 2013-12-31 21:59:56,615 WARN org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received non-NN/SNN/administrator request for image or edits from hdfs/2NN-host@REALM at 2NN-host-IP
>
>
> --
> Thanks,
>
> Manoj
Re: Secondary name node error in checkpoint with Kerberos enabled
Posted by li...@gmail.com.
13201614174
Qdfdhsgdgshagsydyffg
As sfgswzv
Fftdtf
发自我的 iPad
> 在 佛历2557年1月1日，上午6:59，Manoj Samel <ma...@gmail.com> 写道：
>
> * Name node and secondary name nodes on different machines
> * Kerberos was just enabled
> * Cloudera CDH 4.5 on Centos
>
> Secondary name node log (HOST2) shows following
>
>
> 2013-12-31 22:00:11,728 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS) cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException: Image transfer servlet at http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235 failed with status code 403
> Response message:
> Only Namenode, Secondary Namenode, and administrators may access this servlet
>
> Name Node Log (HOST1) shows following
>
> 2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE)
> 2013-12-31 21:59:56,213 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol
>
> ...
> 2013-12-31 21:59:56,612 INFO org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet rejecting: hdfs/2NN-host@REALM
> 2013-12-31 21:59:56,615 WARN org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received non-NN/SNN/administrator request for image or edits from hdfs/2NN-host@REALM at 2NN-host-IP
>
>
> --
> Thanks,
>
> Manoj
Re: Secondary name node error in checkpoint with Kerberos enabled
Posted by li...@gmail.com.
13201614174
Qdfdhsgdgshagsydyffg
As sfgswzv
Fftdtf
�����ҵ� iPad
> �� ����2557��1��1�գ�����6:59��Manoj Samel <ma...@gmail.com> д����
>
> * Name node and secondary name nodes on different machines
> * Kerberos was just enabled
> * Cloudera CDH 4.5 on Centos
>
> Secondary name node log (HOST2) shows following
>
>
> 2013-12-31 22:00:11,728 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS) cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException: Image transfer servlet at http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235 failed with status code 403
> Response message:
> Only Namenode, Secondary Namenode, and administrators may access this servlet
>
> Name Node Log (HOST1) shows following
>
> 2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE)
> 2013-12-31 21:59:56,213 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol
>
> ...
> 2013-12-31 21:59:56,612 INFO org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet rejecting: hdfs/2NN-host@REALM
> 2013-12-31 21:59:56,615 WARN org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received non-NN/SNN/administrator request for image or edits from hdfs/2NN-host@REALM at 2NN-host-IP
>
>
> --
> Thanks,
>
> Manoj
Re: Secondary name node error in checkpoint with Kerberos enabled
Posted by li...@gmail.com.
13201614174
Qdfdhsgdgshagsydyffg
As sfgswzv
Fftdtf
�����ҵ� iPad
> �� ����2557��1��1�գ�����6:59��Manoj Samel <ma...@gmail.com> д����
>
> * Name node and secondary name nodes on different machines
> * Kerberos was just enabled
> * Cloudera CDH 4.5 on Centos
>
> Secondary name node log (HOST2) shows following
>
>
> 2013-12-31 22:00:11,728 ERROR org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS) cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException: Image transfer servlet at http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235 failed with status code 403
> Response message:
> Only Namenode, Secondary Namenode, and administrators may access this servlet
>
> Name Node Log (HOST1) shows following
>
> 2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server: Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE)
> 2013-12-31 21:59:56,213 INFO SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol
>
> ...
> 2013-12-31 21:59:56,612 INFO org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet rejecting: hdfs/2NN-host@REALM
> 2013-12-31 21:59:56,615 WARN org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received non-NN/SNN/administrator request for image or edits from hdfs/2NN-host@REALM at 2NN-host-IP
>
>
> --
> Thanks,
>
> Manoj