DataNode: Cannot start secure cluster without privileged resources  | 
tags/release-0.20.205.0-rc2
-------------------------------------------------------------------------------------------------

                 Key: HADOOP-7750
                 URL: https://issues.apache.org/jira/browse/HADOOP-7750
             Project: Hadoop Common
          Issue Type: Bug
    Affects Versions: 0.20.205.1
         Environment: Linux RHEL5 64bit
sunjava2 1.6.0r14
http://svn.apache.org/repos/asf/hadoop/common/tags/release-0.20.205.0-rc2/branch-0.20-security-205/src/hdfs/org/apache/hadoop/hdfs/server/datanode/DataNode.java
            Reporter: Trevor Powell


This tag compiles just fine. But after configuring it, the datanode fails on 
startup with the below error:


TARTUP_MSG: Starting DataNode
STARTUP_MSG:   host = hd3w94m7/10.152.94.111
STARTUP_MSG:   args = []
STARTUP_MSG:   version = 0.20.205.1
STARTUP_MSG:   build = 
http://svn.apache.org/repos/asf/hadoop/common/tags/release-0.20.205.0-rc2 -r 
1179942; compiled by 'tpowell1' on Wed Oct 12 11:14:46 PDT 2011
************************************************************/
2011-10-14 15:24:56,028 INFO org.apache.hadoop.metrics2.impl.MetricsConfig: 
loaded properties from hadoop-metrics2.properties
2011-10-14 15:24:56,043 INFO 
org.apache.hadoop.metrics2.impl.MetricsSourceAdapter: MBean for source 
MetricsSystem,sub=Stats registered.
2011-10-14 15:24:56,044 INFO org.apache.hadoop.metrics2.impl.MetricsSystemImpl: 
Scheduled snapshot period at 10 second(s).
2011-10-14 15:24:56,044 INFO org.apache.hadoop.metrics2.impl.MetricsSystemImpl: 
DataNode metrics system started
2011-10-14 15:24:56,192 INFO 
org.apache.hadoop.metrics2.impl.MetricsSourceAdapter: MBean for source ugi 
registered.
2011-10-14 15:24:56,421 INFO org.apache.hadoop.security.UserGroupInformation: 
Asked the TGT renewer thread to terminate
2011-10-14 15:24:57,241 INFO org.apache.hadoop.security.UserGroupInformation: 
Login successful for user hdfs/hd3w94m7@XXX using keytab file 
/home/tpowell1/hadoop.tags.release-0.20.205.0-rc2/conf/hdfs.keytab
2011-10-14 15:24:57,242 ERROR org.apache.hadoop.hdfs.server.datanode.DataNode: 
java.lang.RuntimeException: Cannot start secure cluster without privileged 
resources.
        at 
org.apache.hadoop.hdfs.server.datanode.DataNode.startDataNode(DataNode.java:306)
        at 
org.apache.hadoop.hdfs.server.datanode.DataNode.<init>(DataNode.java:281)
        at 
org.apache.hadoop.hdfs.server.datanode.DataNode.makeInstance(DataNode.java:1545)
        at 
org.apache.hadoop.hdfs.server.datanode.DataNode.instantiateDataNode(DataNode.java:1484)
        at 
org.apache.hadoop.hdfs.server.datanode.DataNode.createDataNode(DataNode.java:1502)
        at 
org.apache.hadoop.hdfs.server.datanode.DataNode.secureMain(DataNode.java:1628)
        at 
org.apache.hadoop.hdfs.server.datanode.DataNode.main(DataNode.java:1645)

2011-10-14 15:24:57,243 INFO org.apache.hadoop.hdfs.server.datanode.DataNode: 
SHUTDOWN_MSG:
/************************************************************
SHUTDOWN_MSG: Shutting down DataNode at hd3w94m7.XXX/10.152.94.111
************************************************************/


Checking the Datanode.java code it is started with a null SecureResources .

  public static void main(String args[]) {
    secureMain(args, null);
  }


This null resource seems to get passed all the way down to startDataNode() 
where there is a null check... which in turns throws the error we see.


  void startDataNode(Configuration conf,
                     AbstractList<File> dataDirs, SecureResources resources
                     ) throws IOException {
    if(UserGroupInformation.isSecurityEnabled() && resources == null)
      throw new RuntimeException("Cannot start secure cluster without " +
                "privileged resources.");




--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to