You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-issues@hadoop.apache.org by "Xiaoyu Yao (JIRA)" <ji...@apache.org> on 2019/02/28 03:36:00 UTC
[jira] [Commented] (HDDS-1190) Fix jdk 11 issue for ozonesecure
base image and docker-compose
[ https://issues.apache.org/jira/browse/HDDS-1190?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16780054#comment-16780054 ]
Xiaoyu Yao commented on HDDS-1190:
----------------------------------
cc [~elek]
> Fix jdk 11 issue for ozonesecure base image and docker-compose
> ---------------------------------------------------------------
>
> Key: HDDS-1190
> URL: https://issues.apache.org/jira/browse/HDDS-1190
> Project: Hadoop Distributed Data Store
> Issue Type: Bug
> Reporter: Xiaoyu Yao
> Assignee: Xiaoyu Yao
> Priority: Major
> Attachments: HDDS-1190-docker-hadoop-runner.001.patch, HDDS-1190-trunk.001.patch
>
>
> HDDS-1019 changes to use hadoop-runner as base image for ozonesecure docker-compose. There are a few issues that need to fixed.
>
> 1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume openjdk8 for JAVA_HOME.
>
> 2. The KEYTAB_DIR needs to be quoted with '.
>
> 3. keytab based login failed with Message stream modified (41), [~elek] mentioned in HDDS-1019 that we need to add max_renewable_life to "docker-image/docker-krb5/krb5.conf" like follows.
> [realms]
> EXAMPLE.COM = \{
> kdc = localhost
> admin_server = localhost
> max_renewable_life = 7d
> }
> Failures:
> {code}
> org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: scm/scm@EXAMPLE.COM from keytab /etc/security/keytabs/scm.keytab javax.security.auth.login.LoginException: Message stream modified (41)
> scm_1 | at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
> scm_1 |
> {code}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org