You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by GitBox <gi...@apache.org> on 2020/12/16 11:16:24 UTC
[GitHub] [ozone] Xinshiyou opened a new pull request #1713: HDDS-4602. Ozone shell failed with Kerberos enabled
Xinshiyou opened a new pull request #1713:
URL: https://github.com/apache/ozone/pull/1713
## What changes were proposed in this pull request?
add UserGroupInformation.setConf in top class : GenericCli.java
## What is the link to the Apache JIRA
https://issues.apache.org/jira/browse/HDDS-4602
## How was this patch tested?
Compile and run in local environment, that's OK.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
[GitHub] [ozone] Xinshiyou commented on pull request #1713: HDDS-4602. Ozone shell failed with Kerberos enabled
Posted by GitBox <gi...@apache.org>.
Xinshiyou commented on pull request #1713:
URL: https://github.com/apache/ozone/pull/1713#issuecomment-748737765
Hi @xiaoyuyao ,
I try again with the following command, and got the following error:
`
-> klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: hdfs@myrealm
Valid starting Expires Service principal
12/21/2020 10:35:32 12/22/2020 10:35:32 krbtgt/myrealm@myrealm
renew until 12/28/2020 10:35:32
-> whoami
root
-> bin/ozone sh volume list
Couldn't create RpcClient protocol
-> date
Mon Dec 21 11:30:55 CST 2020
`
And security configure in ozone-site.xml：
`
<property>
<name>ozone.security.enabled</name>
<value>true</value>
<tag>SECURITY</tag>
</property>
<property>
<name>hadoop.security.authentication</name>
<value>kerberos</value>
<tag>SECURITY</tag>
</property>
`
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
[GitHub] [ozone] Xinshiyou commented on pull request #1713: HDDS-4602. Ozone shell failed with Kerberos enabled
Posted by GitBox <gi...@apache.org>.
Xinshiyou commented on pull request #1713:
URL: https://github.com/apache/ozone/pull/1713#issuecomment-752962889
Finally, I figure out：this because UGI read configure from core-site.xml\hdfs-site.xml, rather from ozone-site.xml.
Maybe, we can explain it in detail in the document.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
[GitHub] [ozone] xiaoyuyao commented on pull request #1713: HDDS-4602. Ozone shell failed with Kerberos enabled
Posted by GitBox <gi...@apache.org>.
xiaoyuyao commented on pull request #1713:
URL: https://github.com/apache/ozone/pull/1713#issuecomment-748681309
Thanks @Xinshiyou reporting this. I remember we have acceptance test that covers this.
How do you repro it? Have you "kinit" before running the CLI with security enabled?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
[GitHub] [ozone] Xinshiyou commented on pull request #1713: HDDS-4602. Ozone shell failed with Kerberos enabled
Posted by GitBox <gi...@apache.org>.
Xinshiyou commented on pull request #1713:
URL: https://github.com/apache/ozone/pull/1713#issuecomment-748721928
> Thanks @Xinshiyou reporting this. I remember we have acceptance test that covers this.
> How do you repro it? Have you "kinit" before running the CLI with security enabled?
Thanks for your attention. Yes, I run "kinit" as root for hdfs/`host`@myrealm，then run ozone shell.
I will try again to confirm this problem.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org
[GitHub] [ozone] Xinshiyou closed pull request #1713: HDDS-4602. Ozone shell failed with Kerberos enabled
Posted by GitBox <gi...@apache.org>.
Xinshiyou closed pull request #1713:
URL: https://github.com/apache/ozone/pull/1713
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org