You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@storm.apache.org by ujfjhz <uj...@gmail.com> on 2017/05/04 09:30:01 UTC
GSSException when authenticate storm UI from windows 7
Hello,
I've setup a secure storm cluster by kerberos.
Everything is googd except that I cannot access UI from windows 7.(It's ok
on linux client.)
I'm using Storm 1.1.0, kerberos5 and I've tried both IE and firefox.
When i access UI on windows, ui.log print this exception:
2017-05-04 17:21:39.118 o.a.h.s.a.s.AuthenticationFilter qtp571003874-18
[WARN] Authentication exception: GSSException: Defective token detected
(Mechanism level: GSSHeader did not find the right tag)
org.apache.hadoop.security.authentication.client.AuthenticationException:
GSSException: Defective token detected (Mechanism level: GSSHeader did not
find the right tag)
at
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.authenticate(KerberosAuthenticationHandler.java:399)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.doFilter(AuthenticationFilter.java:507)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1291)
~[storm-core-1.1.0.jar:1.1.0]
at sun.reflect.GeneratedMethodAccessor157.invoke(Unknown Source)
~[?:?]
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.7.0_51]
at java.lang.reflect.Method.invoke(Method.java:606) ~[?:1.7.0_51]
at clojure.lang.Reflector.invokeMatchingMethod(Reflector.java:93)
~[clojure-1.7.0.jar:?]
at clojure.lang.Reflector.invokeInstanceMethod(Reflector.java:28)
~[clojure-1.7.0.jar:?]
at
org.apache.storm.ui.helpers$x_frame_options_filter_handler$fn__6964.invoke(helpers.clj:189)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.ui.helpers.proxy$java.lang.Object$Filter$abec9a8f.doFilter(Unknown
Source) ~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1291)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.servlets.CrossOriginFilter.handle(CrossOriginFilter.java:247)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.servlets.CrossOriginFilter.doFilter(CrossOriginFilter.java:210)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1291)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:443)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1044)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:372)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:978)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.Server.handle(Server.java:369)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:486)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:933)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:995)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:668)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.storm.shade.org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543)
~[storm-core-1.1.0.jar:1.1.0]
at java.lang.Thread.run(Thread.java:744) [?:1.7.0_51]
Caused by: org.ietf.jgss.GSSException: Defective token detected (Mechanism
level: GSSHeader did not find the right tag)
at sun.security.jgss.GSSHeader.<init>(GSSHeader.java:97)
~[?:1.7.0_51]
at
sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:306)
~[?:1.7.0_51]
at
sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
~[?:1.7.0_51]
at
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler$2.run(KerberosAuthenticationHandler.java:366)
~[storm-core-1.1.0.jar:1.1.0]
at
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler$2.run(KerberosAuthenticationHandler.java:348)
~[storm-core-1.1.0.jar:1.1.0]
at java.security.AccessController.doPrivileged(Native Method)
~[?:1.7.0_51]
at javax.security.auth.Subject.doAs(Subject.java:415) ~[?:1.7.0_51]
at
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.authenticate(KerberosAuthenticationHandler.java:348)
~[storm-core-1.1.0.jar:1.1.0]
... 31 more
Any help is appreciated.
Thank you!
ujfjhz