You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@ambari.apache.org by Balázs Bence Sári <bs...@hortonworks.com> on 2017/02/24 14:19:53 UTC
Review Request 57039: Restart Kafka broker failed after enabling
kerberos
with "kinit(v5): No such file or directory while getting initial credentials"
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/
-----------------------------------------------------------
Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
Bugs: AMBARI-20145
https://issues.apache.org/jira/browse/AMBARI-20145
Repository: ambari
Description
-------
Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
Diffs
-----
ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
Diff: https://reviews.apache.org/r/57039/diff/
Testing
-------
Manually tested the fix.
Thanks,
Bal�zs Bence S�ri
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Robert Levas <rl...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166740
-----------------------------------------------------------
Fix it, then Ship it!
ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json (lines 8 - 10)
<https://reviews.apache.org/r/57039/#comment238759>
This should be in the `identities` block of the `KAFKA_BROKER` component. We don't want this to be distributed to all hosts where any Kafka component is installed. Today there is only one component, in the future, there may be more.
ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json (lines 8 - 10)
<https://reviews.apache.org/r/57039/#comment238760>
Same as previous comment.
- Robert Levas
On Feb. 24, 2017, 9:19 a.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 9:19 a.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Sandor Magyari <sm...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166706
-----------------------------------------------------------
Ship it!
Ship It!
- Sandor Magyari
On Feb. 24, 2017, 2:19 p.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 2:19 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Sebastian Toader <st...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166710
-----------------------------------------------------------
Ship it!
Ship It!
- Sebastian Toader
On Feb. 24, 2017, 3:19 p.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 3:19 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Robert Levas <rl...@hortonworks.com>.
> On Feb. 24, 2017, 1:10 p.m., Attila Doroszlai wrote:
> > ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json, line 10
> > <https://reviews.apache.org/r/57039/diff/1/?file=1647123#file1647123line10>
> >
> > In Zookeeper + Kafka cluster (no HDFS) this will result in failure during kerberization:
> >
> > ```
> > Traceback (most recent call last):
> > File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_client.py", line 80, in <module>
> > KerberosClient().execute()
> > ...
> > resource_management.core.exceptions.Fail: User '${hadoop-env/hdfs_user}' doesn't exist
> > ```
If Kafka can be installed without HDFS then a "when" clause should be added....
```
"when" : {
"contains" : ["services", "HDFS"]
}
```
- Robert
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166742
-----------------------------------------------------------
On Feb. 24, 2017, 9:19 a.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 9:19 a.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Attila Doroszlai <ad...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166742
-----------------------------------------------------------
ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json (line 10)
<https://reviews.apache.org/r/57039/#comment238764>
In Zookeeper + Kafka cluster (no HDFS) this will result in failure during kerberization:
```
Traceback (most recent call last):
File "/var/lib/ambari-agent/cache/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_client.py", line 80, in <module>
KerberosClient().execute()
...
resource_management.core.exceptions.Fail: User '${hadoop-env/hdfs_user}' doesn't exist
```
- Attila Doroszlai
On Feb. 24, 2017, 3:19 p.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 3:19 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Attila Magyar <am...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166707
-----------------------------------------------------------
Ship it!
Ship It!
- Attila Magyar
On Feb. 24, 2017, 2:19 p.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 2:19 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Sebastian Toader <st...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166805
-----------------------------------------------------------
Ship it!
Ship It!
- Sebastian Toader
On Feb. 24, 2017, 10 p.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 10 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Robert Levas <rl...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166757
-----------------------------------------------------------
Ship it!
Ship It!
- Robert Levas
On Feb. 24, 2017, 4 p.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 4 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Attila Doroszlai <ad...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/#review166758
-----------------------------------------------------------
Ship it!
Ship It!
- Attila Doroszlai
On Feb. 24, 2017, 10 p.m., Bal�zs Bence S�ri wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/57039/
> -----------------------------------------------------------
>
> (Updated Feb. 24, 2017, 10 p.m.)
>
>
> Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
>
>
> Bugs: AMBARI-20145
> https://issues.apache.org/jira/browse/AMBARI-20145
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
> ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
>
> Diff: https://reviews.apache.org/r/57039/diff/
>
>
> Testing
> -------
>
> Manually tested the fix.
>
>
> Thanks,
>
> Bal�zs Bence S�ri
>
>
Re: Review Request 57039: Restart Kafka broker failed after enabling
kerberos with "kinit(v5): No such file or directory while getting
initial credentials"
Posted by Balázs Bence Sári <bs...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57039/
-----------------------------------------------------------
(Updated Feb. 24, 2017, 9 p.m.)
Review request for Ambari, Attila Magyar, Laszlo Puskas, Oliver Szabo, Robert Levas, and Sebastian Toader.
Changes
-------
review comments.
Bugs: AMBARI-20145
https://issues.apache.org/jira/browse/AMBARI-20145
Repository: ambari
Description
-------
Kafka broker needs the hdfs keytab when Ranger is installed and Ranger Kafka plugin is enabled (plugin exists as of HDP 2.3)
Diffs (updated)
-----
ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json 2b1c01b
ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json e1e6461
Diff: https://reviews.apache.org/r/57039/diff/
Testing
-------
Manually tested the fix.
Thanks,
Bal�zs Bence S�ri