Hi, i'm facing an issue with Hbase in secure mode. I followed the steps described on http://slider.incubator.apache.org/docs/security.html
i created my headless keytab (and the associated principals), which i deployed on hdfs and when i start an hbase application, the keytab is correctly packaged in the SliderAppMaster container under the keytabs folder, but here is the problem: 2015-05-28 16:03:07,037 [main] INFO appmaster.SliderAppMaster - Connecting > to RM at 1024,address tracking URL= > http://a4-5d-36-fd-a1-7c.hpc.criteo.preprod:1025 > 2015-05-28 16:03:07,065 [main] INFO appmaster.SliderAppMaster - Slider AM > Security Mode: KEYTAB > 2015-05-28 16:03:07,065 [main] INFO appmaster.SliderAppMaster - Token > HDFS_DELEGATION_TOKEN > 2015-05-28 16:03:07,065 [main] INFO appmaster.SliderAppMaster - Token > YARN_AM_RM_TOKEN > 2015-05-28 16:03:07,093 [main] INFO security.SecurityConfiguration - No > host keytab file path specified. Will attempt to retrieve keytab file > y.bismuth.keytab as a local resource for the container > 2015-05-28 16:03:07,104 [main] INFO security.UserGroupInformation - Login > successful for user y.bismuth using keytab file > /hdfs/wwn/600508b1001c246eb94fcc5ff4d68b4e/yarn/data/usercache/y.bismuth/appcache/application_1432038882976_2039/container_e11_1432038882976_2039_01_000001/keytabs/y.bismuth.keytab > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - security > enabled = true > > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - > <<<<<<SOME DEBUG > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - UGI = > [email protected] (auth:KERBEROS) > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - isKeytab > = false > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - tokens = > [] > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - > hasKerberosCredentials = true > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - > credentials = org.apache.hadoop.security.Credentials@1cf2fed4 > 2015-05-28 16:03:07,104 [main] INFO appmaster.SliderAppMaster - > authentication method = KERBEROS > 2015-05-28 16:03:07,111 [main] INFO appmaster.SliderAppMaster - config = > Configuration: core-default.xml, core-site.xml, yarn-default.xml, > yarn-site.xml, hdfs-default.xml, hdfs-site.xml, > org/apache/slider/slider.xml, mapred-default.xml, mapred-site.xml > 2015-05-28 16:03:07,111 [main] INFO appmaster.SliderAppMaster - SOME > DEBUG>>>>> > > 2015-05-28 16:03:07,112 [main] ERROR main.ServiceLauncher - User is not > based on a keytab in a secure deployment. So as far as i can see, i'm logging in successfully using the keytab packaged in the container, but the flag isKeytab, which should be set to true in my UGI (i hope), is not, and i can't figure out why. Because of that, my SliderAppMaster crash. Any idea ?
