You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@accumulo.apache.org by Bulldog20630405 <bu...@gmail.com> on 2019/03/26 17:47:41 UTC
IS not authorized => code:BAD_AUTHORIZATIONS
we are running a accumulo cluster which was running ok up until a day ago...
we are getting the following error:
note: we are using accumulo 1.8
<USER> is not authorized
ThriftSecruityException(user:<USER>, code: BAD_AUTHORIZATIONS)
at
org.apache.accumulo.tserver.TableServer$ThriftClientHanlder.startMultiScan(TabletServer.java:637)
....
unfortunately i cannot tell by the exception which table the scan is going
against; in general what is this issue?
Re: IS not authorized => code:BAD_AUTHORIZATIONS
Posted by Christopher <ct...@apache.org>.
Sorry, not `userpermissions`. I meant compare with `getauths <USER>`
On Tue, Mar 26, 2019 at 1:55 PM Christopher <ct...@apache.org> wrote:
>
> In general, this means the user is trying to initiate a scan by
> passing in authorizations (security labels) which that user has not
> been granted.
> This is available in the API in order to support users ability to
> limit their own authorizations. The error results from an attempt to
> expand their authorizations, rather than limit them.
>
> Compare the scan command being executed with the output (in the shell)
> of `userpermissions <USER>`
>
> On Tue, Mar 26, 2019 at 1:48 PM Bulldog20630405
> <bu...@gmail.com> wrote:
> >
> > we are running a accumulo cluster which was running ok up until a day ago...
> >
> > we are getting the following error:
> >
> > note: we are using accumulo 1.8
> >
> > <USER> is not authorized
> > ThriftSecruityException(user:<USER>, code: BAD_AUTHORIZATIONS)
> > at org.apache.accumulo.tserver.TableServer$ThriftClientHanlder.startMultiScan(TabletServer.java:637)
> > ....
> >
> > unfortunately i cannot tell by the exception which table the scan is going against; in general what is this issue?
> >
> >
Re: IS not authorized => code:BAD_AUTHORIZATIONS
Posted by Bulldog20630405 <bu...@gmail.com>.
thanx; (i remember that from a few years back) ...i have been working with
hbase(against my will :-/ ) for the last few years...now back to accumulo
again!
On Tue, Mar 26, 2019 at 1:56 PM Christopher <ct...@apache.org> wrote:
> In general, this means the user is trying to initiate a scan by
> passing in authorizations (security labels) which that user has not
> been granted.
> This is available in the API in order to support users ability to
> limit their own authorizations. The error results from an attempt to
> expand their authorizations, rather than limit them.
>
> Compare the scan command being executed with the output (in the shell)
> of `userpermissions <USER>`
>
> On Tue, Mar 26, 2019 at 1:48 PM Bulldog20630405
> <bu...@gmail.com> wrote:
> >
> > we are running a accumulo cluster which was running ok up until a day
> ago...
> >
> > we are getting the following error:
> >
> > note: we are using accumulo 1.8
> >
> > <USER> is not authorized
> > ThriftSecruityException(user:<USER>, code: BAD_AUTHORIZATIONS)
> > at
> org.apache.accumulo.tserver.TableServer$ThriftClientHanlder.startMultiScan(TabletServer.java:637)
> > ....
> >
> > unfortunately i cannot tell by the exception which table the scan is
> going against; in general what is this issue?
> >
> >
>
Re: IS not authorized => code:BAD_AUTHORIZATIONS
Posted by Christopher <ct...@apache.org>.
In general, this means the user is trying to initiate a scan by
passing in authorizations (security labels) which that user has not
been granted.
This is available in the API in order to support users ability to
limit their own authorizations. The error results from an attempt to
expand their authorizations, rather than limit them.
Compare the scan command being executed with the output (in the shell)
of `userpermissions <USER>`
On Tue, Mar 26, 2019 at 1:48 PM Bulldog20630405
<bu...@gmail.com> wrote:
>
> we are running a accumulo cluster which was running ok up until a day ago...
>
> we are getting the following error:
>
> note: we are using accumulo 1.8
>
> <USER> is not authorized
> ThriftSecruityException(user:<USER>, code: BAD_AUTHORIZATIONS)
> at org.apache.accumulo.tserver.TableServer$ThriftClientHanlder.startMultiScan(TabletServer.java:637)
> ....
>
> unfortunately i cannot tell by the exception which table the scan is going against; in general what is this issue?
>
>