Hari Sekhon created AMBARI-8748:
-----------------------------------
Summary: HDFS Rebalance Kerberos Support
Key: AMBARI-8748
URL: https://issues.apache.org/jira/browse/AMBARI-8748
Project: Ambari
Issue Type: Improvement
Affects Versions: 1.7.0
Environment: HDP 2.1
Reporter: Hari Sekhon
Priority: Minor
Ambari's new HDFS Rebalance option doesn't work with Kerberos enabled on a
cluster because it doesn't obtain a TGT first.
{code}
Executing command ['su', '-', u'hdfs', '-c', u'export PATH=$PATH:/usr/bin ;
hdfs --config /etc/hadoop/conf balancer -threshold 1']
[balancer] 2014-12-17 09:57:17.124218 Time Stamp Iteration#
Bytes Already Moved Bytes Left To Move Bytes Being Moved
[balancer] 2014-12-17 09:57:18.001836 java.io.IOException: Failed on local
exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate
failed [Caused by GSSException: No valid credentials provided (Mechanism level:
Failed to find any Kerberos tgt)]; Host Details : local host is:
"<hostname>/x.x.x.x"; destination host is: "<hostname>":8020; . Exiting ...
{code}
The workaround for this is simply to do
{code}
su - hdfs -c 'kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs'
{code}
in shell before clicking the Web UI's Rebalance HDFS button.
Ambari should check if the cluster is kerberized and if so run the command
{code}kinit -kt /etc/security/keytabs/hdfs.headless.keytab hdfs{code} as hdfs
just prior to starting the balancer.
Regards,
Hari Sekhon
http://www.linkedin.com/in/harisekhon
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
