[jira] [Commented] (TRAFODION-1595) Privilege manager tables missing from HBase

["Roberta Marton (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/TRAFODION-1595?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15120238#comment-15120238 ] 

Roberta Marton commented on TRAFODION-1595:
-------------------------------------------

This issue has been recreated.  If initialize authorization fails for any reason, some remnants of the operation remain around.  Once DDL_TRANSACTIONS have been enabled, then this issue goes away.

Code changes have been made as follows:

If the initialize operation fails and DDL_TRANSACTIONS is not enabled, go ahead and cleanup all remnants of the operation.

Added new option to cleanup after a failed authorization attempt: 
  INITIALIZE AUTHORIZATION, CLEANUP.  
  The CLEANUP option can be used to clean up after a failed initialize attempt when the DROP option fails.

Added logging into the initialize, drop, and cleanup authorization requests.  To turn on:

   edit the file: $MY_SQROOT/conf/log4cxx.trafodion.masterexe.config
   search for: log4j.logger.SQL.PRIVMGR=INFO
   change to: log4j.logger.SQL.PRIVMGR=DEBUG 

All privilege manager debug messages will be logged to master_exec logs found: $MY_SQROOT/logs/master_exec_n_nnnn.log


> Privilege manager tables missing from HBase
> -------------------------------------------
>
>                 Key: TRAFODION-1595
>                 URL: https://issues.apache.org/jira/browse/TRAFODION-1595
>             Project: Apache Trafodion
>          Issue Type: Bug
>          Components: sql-cmu, sql-security
>            Reporter: Roberta Marton
>
> The user had enabled security which creates a schema called "_PRIVMGR_MD_" and also creates several tables in the schema.  As part of initializing security writes information into these tables.
> Later, the user tries to create a role and HBase returns an error that one of the privilege manager tables, ROLE_USAGE was not found.  At this time, it was noticed that all the privilege manager tables existed in the Trafodion metadata but non of the existed in HBase.  It is unknown what happened to the tables.
> The privilege manager tables were removed, security enabled and everything worked fine.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)