You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Bharat Viswanadham (Jira)" <ji...@apache.org> on 2021/05/10 12:19:00 UTC

[jira] [Created] (HDDS-5205) Make admin check for SCM HA cluster

Bharat Viswanadham created HDDS-5205:
----------------------------------------

             Summary: Make admin check for SCM HA cluster
                 Key: HDDS-5205
                 URL: https://issues.apache.org/jira/browse/HDDS-5205
             Project: Apache Ozone
          Issue Type: Task
            Reporter: Bharat Viswanadham


By default, the user started principal is added to scmAdminUsernames.

    String scmUsername = UserGroupInformation.getCurrentUser().getUserName();
    if (!scmAdminUsernames.contains(scmUsername)) {
      scmAdminUsernames.add(scmUsername);
    }

In HA cluster, when kinit with scm2 principal when scm1 is leader, we get access denied as we check getUserName() and also when adding to adminlist we use getUserName.

In OM we don't have this kind of issue, as getShortUserName() is used.


{code:java}
  String omSPN = UserGroupInformation.getCurrentUser().getShortUserName();
    if (!ozAdmins.contains(omSPN)) {
      ozAdmins.add(omSPN);
    }
{code}




--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org