Billie Rinaldi created SLIDER-990:
-------------------------------------
Summary: The isFromKeytab check is not always valid
Key: SLIDER-990
URL: https://issues.apache.org/jira/browse/SLIDER-990
Project: Slider
Issue Type: Bug
Components: security
Affects Versions: Slider 0.81
Reporter: Billie Rinaldi
In SliderAppMaster, we use loginUserFromKeytab and then verify that the
resulting user isFromKeytab. I'm getting a failure on the isFromKeytab check.
I believe that the fix for HADOOP-10786 was included in the version of Hadoop I
was using. You can see the contradictory log statements below.
{noformat}
2015-11-11 00:54:08,881 [main] INFO security.SecurityConfiguration - No host
keytab file path specified. Will attempt to retrieve keytab file
accumulo.headless.keytab as a local resource for the container
2015-11-11 00:54:08,881 [main] INFO appmaster.SliderAppMaster - Logging in as
accumulo-test1 with keytab keytabs/accumulo.headless.keytab
2015-11-11 00:54:08,947 [main] INFO security.UserGroupInformation - Login
successful for user accumulo-test1 using keytab file
/hadoop/yarn/local/usercache/accumulo/appcache/application_1447164964705_0014/container_e02_1447164964705_0014_01_000001/keytabs/accumulo.headless.keytab
2015-11-11 00:54:08,947 [main] ERROR main.ServiceLauncher - User is not based
on a keytab in a secure deployment.
2015-11-11 00:54:08,948 [main] INFO util.ExitUtil - Exiting with status 70
{noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
