You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@hbase.apache.org by jeff saremi <je...@hotmail.com> on 2017/04/13 18:08:12 UTC

Http 500 error when accessing master:16010/master-status - ESAPI

I'm running a test instance of hbase 1.2.2 on my local machine (zk, master, regionserver,... all on one machine)

I looked at the esapi-2.1.0.1.jar file and it does not have a resource called: ESAPI.properties




org.owasp.esapi.errors.ConfigurationException: java.lang.reflect.InvocationTargetException SecurityConfiguration class (org.owasp.esapi.reference.DefaultSecurityConfiguration) CTOR threw exception.
    at org.owasp.esapi.util.ObjFactory.make(ObjFactory.java:129)
    at org.owasp.esapi.ESAPI.securityConfiguration(ESAPI.java:184)
    at org.owasp.esapi.ESAPI.encoder(ESAPI.java:99)
    at org.apache.hadoop.hbase.tmpl.common.TaskMonitorTmplImpl.encodeFilter(TaskMonitorTmplImpl.java:29)
    at org.apache.hadoop.hbase.tmpl.common.TaskMonitorTmplImpl.renderNoFlush(TaskMonitorTmplImpl.java:160)
    at org.apache.hadoop.hbase.tmpl.common.TaskMonitorTmpl.renderNoFlush(TaskMonitorTmpl.java:180)
    at org.apache.hadoop.hbase.tmpl.master.MasterStatusTmplImpl.renderNoFlush(MasterStatusTmplImpl.java:350)
    at org.apache.hadoop.hbase.tmpl.master.MasterStatusTmpl.renderNoFlush(MasterStatusTmpl.java:387)
    ...
    at org.owasp.esapi.reference.DefaultSecurityConfiguration.getInstance(DefaultSecurityConfiguration.java:67)
    ... 43 more
Caused by: java.lang.IllegalArgumentException: Failed to load ESAPI.properties as a classloader resource.
    at org.owasp.esapi.reference.DefaultSecurityConfiguration.loadConfigurationFromClasspath(DefaultSecurityConfiguration.java:682)
    at org.owasp.esapi.reference.DefaultSecurityConfiguration.loadConfiguration(DefaultSecurityConfiguration.java:440)
    ... 46 more

Re: Http 500 error when accessing master:16010/master-status - ESAPI

Posted by Josh Elser <el...@apache.org>.
Might you try upgrading to the latest on the HBase 1.2 line? ESAPI has 
been removed from HBase because it is incompatibly licensed:

https://issues.apache.org/jira/browse/HBASE-16317

There was also https://issues.apache.org/jira/browse/HBASE-16298 which 
seems to be your reported issue, but it was not addressed given the 
removal by HBASE-16317.

jeff saremi wrote:
> I'm running a test instance of hbase 1.2.2 on my local machine (zk, master, regionserver,... all on one machine)
>
> I looked at the esapi-2.1.0.1.jar file and it does not have a resource called: ESAPI.properties
>
>
>
>
> org.owasp.esapi.errors.ConfigurationException: java.lang.reflect.InvocationTargetException SecurityConfiguration class (org.owasp.esapi.reference.DefaultSecurityConfiguration) CTOR threw exception.
>      at org.owasp.esapi.util.ObjFactory.make(ObjFactory.java:129)
>      at org.owasp.esapi.ESAPI.securityConfiguration(ESAPI.java:184)
>      at org.owasp.esapi.ESAPI.encoder(ESAPI.java:99)
>      at org.apache.hadoop.hbase.tmpl.common.TaskMonitorTmplImpl.encodeFilter(TaskMonitorTmplImpl.java:29)
>      at org.apache.hadoop.hbase.tmpl.common.TaskMonitorTmplImpl.renderNoFlush(TaskMonitorTmplImpl.java:160)
>      at org.apache.hadoop.hbase.tmpl.common.TaskMonitorTmpl.renderNoFlush(TaskMonitorTmpl.java:180)
>      at org.apache.hadoop.hbase.tmpl.master.MasterStatusTmplImpl.renderNoFlush(MasterStatusTmplImpl.java:350)
>      at org.apache.hadoop.hbase.tmpl.master.MasterStatusTmpl.renderNoFlush(MasterStatusTmpl.java:387)
>      ...
>      at org.owasp.esapi.reference.DefaultSecurityConfiguration.getInstance(DefaultSecurityConfiguration.java:67)
>      ... 43 more
> Caused by: java.lang.IllegalArgumentException: Failed to load ESAPI.properties as a classloader resource.
>      at org.owasp.esapi.reference.DefaultSecurityConfiguration.loadConfigurationFromClasspath(DefaultSecurityConfiguration.java:682)
>      at org.owasp.esapi.reference.DefaultSecurityConfiguration.loadConfiguration(DefaultSecurityConfiguration.java:440)
>      ... 46 more
>
>