You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2023/02/08 07:17:00 UTC

[jira] [Commented] (HADOOP-18329) Add support for IBM Semeru OE JRE 11.0.15.0 and greater

    [ https://issues.apache.org/jira/browse/HADOOP-18329?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17685720#comment-17685720 ] 

ASF GitHub Bot commented on HADOOP-18329:
-----------------------------------------

Tre2878 commented on PR #4537:
URL: https://github.com/apache/hadoop/pull/4537#issuecomment-1422125911

   hi,[JackBuggins](https://github.com/JackBuggins),I am using in the merged hadoop3.3.4 your https://github.com/apache/hadoop/pull/5208 code, start the datanode error, an error is as follows:
   `STARTUP_MSG:   java = 11.0.15
   ************************************************************/
   INFO org.apache.hadoop.hdfs.server.datanode.DataNode: registered UNIX signal handlers for [TERM, HUP, INT]
   ERROR org.apache.hadoop.security.UserGroupInformation: Unable to find JAAS classes:com.ibm.security.auth.UsernamePrincipal
   ERROR org.apache.hadoop.hdfs.server.datanode.DataNode: Exception in secureMain
   org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: work/***@HADOOP.COM from keytab /etc/security/keytab/.hdfs.keytab javax.security.auth.login.LoginException: No LoginModule found for com.ibm.security.auth.module.Krb5LoginModule
           at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1986)
           at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1361)
           at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1122)
           at org.apache.hadoop.security.SecurityUtil.login(SecurityUtil.java:315)
           at org.apache.hadoop.hdfs.server.datanode.DataNode.instantiateDataNode(DataNode.java:2732)
           at org.apache.hadoop.hdfs.server.datanode.DataNode.createDataNode(DataNode.java:2778)
           at org.apache.hadoop.hdfs.server.datanode.DataNode.secureMain(DataNode.java:2922)
           at org.apache.hadoop.hdfs.server.datanode.DataNode.main(DataNode.java:2946)
   Caused by: javax.security.auth.login.LoginException: No LoginModule found for com.ibm.security.auth.module.Krb5LoginModule
           at java.base/javax.security.auth.login.LoginContext.invoke(LoginContext.java:731)
           at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:672)
           at java.base/javax.security.auth.login.LoginContext$4.run(LoginContext.java:670)
           at java.base/java.security.AccessController.doPrivileged(AccessController.java:783)
           at java.base/javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:670)
           at java.base/javax.security.auth.login.LoginContext.login(LoginContext.java:581)
           at org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2065)
           at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1975)
           ... 7 more`
   java -version:
   `openjdk version "11.0.15" 2022-04-19
   IBM Semeru Runtime Open Edition 11.0.15.0 (build 11.0.15+10)
   Eclipse OpenJ9 VM 11.0.15.0 (build openj9-0.32.0, JRE 11 Linux amd64-64-Bit Compressed References 20220422_425 (JIT enabled, AOT enabled)
   OpenJ9   - 9a84ec34e
   OMR      - ab24b6666
   JCL      - b7b5b42ea6 based on jdk-11.0.15+10)`
   Do I need to use a later version of the jdk or is this an unsolved bug




> Add support for IBM Semeru OE JRE 11.0.15.0 and greater
> -------------------------------------------------------
>
>                 Key: HADOOP-18329
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18329
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: auth, common
>    Affects Versions: 3.0.0, 3.1.0, 3.0.1, 3.2.0, 3.0.2, 3.1.1, 3.0.3, 3.3.0, 3.1.2, 3.2.1, 3.1.3, 3.1.4, 3.2.2, 3.3.1, 3.2.3, 3.3.2, 3.3.3
>         Environment: Running Hadoop (or Apache Spark 3.2.1 or above) on IBM Semeru runtimes open edition 11.0.15.0 or greater.
>            Reporter: Jack
>            Assignee: Jack
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.4.0, 3.3.5
>
>   Original Estimate: 1h
>          Time Spent: 2.5h
>  Remaining Estimate: 0h
>
> There are checks within the PlatformName class that use the Vendor property of the provided runtime JVM specifically looking for `IBM` within the name. Whilst this check worked for IBM's [java technology edition|https://www.ibm.com/docs/en/sdk-java-technology] it fails to work on [Semeru|https://developer.ibm.com/languages/java/semeru-runtimes/] since 11.0.15.0 due to the following change:
> h4. java.vendor system property
> In this release, the {{java.vendor}} system property has been changed from "International Business Machines Corporation" to "IBM Corporation".
> Modules such as the below are not provided in these runtimes.
> com.ibm.security.auth.module.JAASLoginModule



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org