You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@accumulo.apache.org by "John Vines (JIRA)" <ji...@apache.org> on 2013/02/12 00:49:12 UTC
[jira] [Commented] (ACCUMULO-1060) gc is getting an authentication
error
[ https://issues.apache.org/jira/browse/ACCUMULO-1060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13576226#comment-13576226 ]
John Vines commented on ACCUMULO-1060:
--------------------------------------
Got it, there's a token serialization mismatch. Between the refactoring and keeping deprecated methods, there were a few cases throughout the code where the serialized bytes of a SecurityToken were extracted from a Credential and resupplied to a getConnector method. These bytes were then treated as a password, resulting in a mismatch. CredentialHelper.extractToken(Credential) will reassemble a SecurityToken give the canonical class name and serialized version of it. This code is used in the server as well, but only after the token class has been verified as valid by the authenticator.
> gc is getting an authentication error
> -------------------------------------
>
> Key: ACCUMULO-1060
> URL: https://issues.apache.org/jira/browse/ACCUMULO-1060
> Project: Accumulo
> Issue Type: Bug
> Components: gc
> Reporter: Eric Newton
> Assignee: John Vines
> Priority: Blocker
> Fix For: 1.5.0
>
>
> Just started seeing this. TServers/monitor have no problems authenticating.
> {noformat}
> Unable to scan metadata table
> java.lang.RuntimeException: org.apache.accumulo.core.client.AccumuloSecurityException: Error BAD_CREDENTIALS for user !SYSTEM - Username or Password is Invalid
> at org.apache.accumulo.core.client.impl.ScannerIterator.hasNext(ScannerIterator.java:174)
> at org.apache.accumulo.server.util.MetadataTable$LogEntryIterator.hasNext(MetadataTable.java:930)
> at org.apache.accumulo.server.gc.GarbageCollectWriteAheadLogs.removeMetadataEntries(GarbageCollectWriteAheadLogs.java:174)
> at org.apache.accumulo.server.gc.GarbageCollectWriteAheadLogs.collect(GarbageCollectWriteAheadLogs.java:82)
> at org.apache.accumulo.server.gc.SimpleGarbageCollector.run(SimpleGarbageCollector.java:302)
> at org.apache.accumulo.server.gc.SimpleGarbageCollector.main(SimpleGarbageCollector.java:162)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> at java.lang.reflect.Method.invoke(Method.java:597)
> at org.apache.accumulo.start.Main$1.run(Main.java:97)
> at java.lang.Thread.run(Thread.java:662)
> Caused by: org.apache.accumulo.core.client.AccumuloSecurityException: Error BAD_CREDENTIALS for user !SYSTEM - Username or Password is Invalid
> at org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:474)
> at org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:298)
> at org.apache.accumulo.core.client.impl.ScannerIterator$Reader.run(ScannerIterator.java:82)
> at org.apache.accumulo.core.client.impl.ScannerIterator.hasNext(ScannerIterator.java:164)
> ... 11 more
> Caused by: ThriftSecurityException(user:!SYSTEM, code:BAD_CREDENTIALS)
> at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result$startScan_resultStandardScheme.read(TabletClientService.java:4652)
> at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result$startScan_resultStandardScheme.read(TabletClientService.java:4629)
> at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result.read(TabletClientService.java:4552)
> at org.apache.thrift.TServiceClient.receiveBase(TServiceClient.java:78)
> at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$Client.recv_startScan(TabletClientService.java:209)
> at org.apache.accumulo.core.tabletserver.thrift.TabletClientService$Client.startScan(TabletClientService.java:186)
> at org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:419)
> ... 14 more
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira