[
https://issues.apache.org/jira/browse/RANGER-399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14495757#comment-14495757
]
robinlin commented on RANGER-399:
---------------------------------
Thanks for your reply.
But there is another problem.
I have created a user "hadoop" with password "hadoop" in Kerberos.
When I test connection, it gives me the following error message.
{noformat}
2015-04-15 02:40:56,635 [http-bio-6080-exec-10] INFO
com.xasecure.hadoop.client.config.BaseClient (BaseClient.java:101) - Init
Login: using username/password
2015-04-15 02:40:56,823 [http-bio-6080-exec-10] ERROR com.xasecure.biz.AssetMgr
(AssetMgr.java:1682) - Unable to connect repository with given config for
cluster_hadoop
com.xasecure.hadoop.client.exceptions.HadoopException: listFilesInternal:
Unable to get listing of files for directory /] from Hadoop environment
[cluster_hadoop].
at
com.xasecure.hadoop.client.HadoopFS.listFilesInternal(HadoopFS.java:113)
at com.xasecure.hadoop.client.HadoopFS.access$000(HadoopFS.java:44)
at com.xasecure.hadoop.client.HadoopFS$1.run(HadoopFS.java:139)
at com.xasecure.hadoop.client.HadoopFS$1.run(HadoopFS.java:136)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.Subject.doAs(Subject.java:356)
at com.xasecure.hadoop.client.HadoopFS.listFiles(HadoopFS.java:143)
at com.xasecure.hadoop.client.HadoopFS.testConnection(HadoopFS.java:176)
at com.xasecure.biz.AssetMgr.testConfig(AssetMgr.java:1624)
at com.xasecure.rest.AssetREST.testConfig(AssetREST.java:163)
at
com.xasecure.rest.AssetREST$$FastClassByCGLIB$$90363ab.invoke(<generated>)
at net.sf.cglib.proxy.MethodProxy.invoke(MethodProxy.java:191)
at
org.springframework.aop.framework.Cglib2AopProxy$CglibMethodInvocation.invokeJoinpoint(Cglib2AopProxy.java:689)
{noformat}
Here is the value of the attribute "config" in post data of action "test
connection"
{noformat}
{
"username": "hadoop",
"password": "hadoop",
"fs.default.name": "hdfs://allinone:8020",
"hadoop.security.authorization": "false",
"hadoop.security.authentication": "kerberos",
"hadoop.security.auth_to_local": "RULE:[2:$1@$0]([rn]m@.*)s/.*/yarn/
RULE:[2:$1@$0](jhs@.*)s/.*/mapred/ RULE:[2:$1@$0]([nd]n@.*)s/.*/hdfs/
RULE:[2:$1@$0](hm@.*)s/.*/hbase/ RULE:[2:$1@$0](rs@.*)s/.*/hbase/
DEFAULT",
"dfs.datanode.kerberos.principal": "dn/[email protected]",
"dfs.namenode.kerberos.principal": "nn/[email protected]",
"dfs.secondary.namenode.kerberos.principal": "nn/[email protected]",
"hadoop.rpc.protection": "-",
"commonNameForCertificate": "-"
}
{noformat}
> Testing connection at a Kerberized cluster
> ------------------------------------------
>
> Key: RANGER-399
> URL: https://issues.apache.org/jira/browse/RANGER-399
> Project: Ranger
> Issue Type: Bug
> Components: admin
> Affects Versions: 0.4.1
> Environment: any
> Reporter: robinlin
> Assignee: Ramesh Mani
>
> Hi all
> The connection testing seems malfunctioned in a Kerberized Cluster.
> Such as HDFS repository, when I traced the source code, I found it needs the
> path of keytab, but there is no place to specify the path on the web ui.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
