You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Vivek Ratnavel Subramanian (Jira)" <ji...@apache.org> on 2021/05/13 23:30:00 UTC
[jira] [Updated] (HDDS-5165) OM DB checkpoint servlet not
accessible in a secure cluster
[ https://issues.apache.org/jira/browse/HDDS-5165?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Vivek Ratnavel Subramanian updated HDDS-5165:
---------------------------------------------
Status: Patch Available (was: Open)
> OM DB checkpoint servlet not accessible in a secure cluster
> -----------------------------------------------------------
>
> Key: HDDS-5165
> URL: https://issues.apache.org/jira/browse/HDDS-5165
> Project: Apache Ozone
> Issue Type: Bug
> Components: OM
> Affects Versions: 1.1.0
> Reporter: Vivek Ratnavel Subramanian
> Assignee: Vivek Ratnavel Subramanian
> Priority: Major
> Labels: pull-request-available
>
> When security and ACL is enabled, but not spnego, the OMDBCheckpointServlet throws an error:
> {code:java}
> 10:02:29.094 PM ERROR OMDBCheckpointServlet
> Permission denied: User principal 'dr.who' does not have access to /dbCheckpoint.
> This can happen when Ozone Manager is started with a different user.
> Please append 'dr.who' to OM 'ozone.administrators' config and restart OM to grant current user access to this endpoint.{code}
> When Spnego is disabled, permissions cannot be checked since HTTP request will not have an identity (kerberos principal) which is causing this error.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org