[jira] [Created] (HDDS-7529) Secure SCM bootstrap fails if clusterID validation is disabled

["Attila Doroszlai (Jira)" <ji...@apache.org>]

Attila Doroszlai created HDDS-7529:
--------------------------------------

             Summary: Secure SCM bootstrap fails if clusterID validation is disabled
                 Key: HDDS-7529
                 URL: https://issues.apache.org/jira/browse/HDDS-7529
             Project: Apache Ozone
          Issue Type: Bug
          Components: SCM HA
    Affects Versions: 1.3.0
            Reporter: Attila Doroszlai
            Assignee: Attila Doroszlai


Secure SCM bootstrap fails if {{ozone.scm.skip.bootstrap.validation=true}}.

{code}
org.apache.hadoop.security.AccessControlException: Client cannot authenticate via:[KERBEROS]
  ...
  at org.apache.hadoop.hdds.protocolPB.SCMSecurityProtocolClientSideTranslatorPB.getSCMCertChain(SCMSecurityProtocolClientSideTranslatorPB.java:222)
  at org.apache.hadoop.hdds.scm.ha.HASecurityUtils.getRootCASignedSCMCert(HASecurityUtils.java:150)
  at org.apache.hadoop.hdds.scm.ha.HASecurityUtils.initializeSecurity(HASecurityUtils.java:103)
  at org.apache.hadoop.hdds.scm.server.StorageContainerManager.initializeSecurityIfNeeded(StorageContainerManager.java:1157)
  at org.apache.hadoop.hdds.scm.server.StorageContainerManager.scmBootstrap(StorageContainerManager.java:1084)
  at org.apache.hadoop.hdds.scm.server.StorageContainerManagerStarter$SCMStarterHelper.bootStrap(StorageContainerManagerStarter.java:192)
  at org.apache.hadoop.hdds.scm.server.StorageContainerManagerStarter.bootStrapScm(StorageContainerManagerStarter.java:135)
{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org