[ 
https://issues.apache.org/jira/browse/HDDS-1788?focusedWorklogId=286291&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-286291
 ]

ASF GitHub Bot logged work on HDDS-1788:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 01/Aug/19 00:08
            Start Date: 01/Aug/19 00:08
    Worklog Time Spent: 10m 
      Work Description: vivekratnavel commented on pull request #1201: 
HDDS-1788. Add kerberos support to Ozone Recon
URL: https://github.com/apache/hadoop/pull/1201
 
 
   Recon fails to come up in a secure cluster with the following error:
   ```
   Failed startup of context 
o.e.j.w.WebAppContext@2009f9b0{/,file:///tmp/jetty-0.0.0.0-9888-recon-_-any-2565178148822292652.dir/webapp/,UNAVAILABLE}{/recon}
 javax.servlet.ServletException: javax.servlet.ServletException: Principal not 
defined in configuration at 
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:188)
 at
   ```
   
   This patch addresses this issue and enables Recon to come up in clusters 
secured by kerberos. I have manually tested the patch by creating the recon jar 
and replacing an old jar in a live secure CM deployed cluster and verified that 
Recon starts successfully and is able to login successfully with the kerberos 
ticket. Also updated ozonesecure docker-compose file to add recon and verified 
that recon is able to come up successfully. This patch also fixes various typos 
found in other parts of the source code not related to the title of this JIRA.
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


Issue Time Tracking
-------------------

            Worklog Id:     (was: 286291)
            Time Spent: 10m
    Remaining Estimate: 0h

> Add kerberos support to Ozone Recon
> -----------------------------------
>
>                 Key: HDDS-1788
>                 URL: https://issues.apache.org/jira/browse/HDDS-1788
>             Project: Hadoop Distributed Data Store
>          Issue Type: Sub-task
>          Components: Ozone Recon
>    Affects Versions: 0.4.0
>            Reporter: Vivek Ratnavel Subramanian
>            Assignee: Vivek Ratnavel Subramanian
>            Priority: Major
>              Labels: pull-request-available
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> Recon fails to startup in a kerberized cluster with the following error:
> {code:java}
> Failed startup of context 
> o.e.j.w.WebAppContext@2009f9b0{/,file:///tmp/jetty-0.0.0.0-9888-recon-_-any-2565178148822292652.dir/webapp/,UNAVAILABLE}{/recon}
>  javax.servlet.ServletException: javax.servlet.ServletException: Principal 
> not defined in configuration at 
> org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:188)
>  at 
> org.apache.hadoop.security.authentication.server.AuthenticationFilter.initializeAuthHandler(AuthenticationFilter.java:194)
>  at 
> org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:180)
>  at org.eclipse.jetty.servlet.FilterHolder.initialize(FilterHolder.java:139) 
> at 
> org.eclipse.jetty.servlet.ServletHandler.initialize(ServletHandler.java:873) 
> at 
> org.eclipse.jetty.servlet.ServletContextHandler.startContext(ServletContextHandler.java:349)
>  at 
> org.eclipse.jetty.webapp.WebAppContext.startWebapp(WebAppContext.java:1406) 
> at 
> org.eclipse.jetty.webapp.WebAppContext.startContext(WebAppContext.java:1368) 
> at 
> org.eclipse.jetty.server.handler.ContextHandler.doStart(ContextHandler.java:778)
>  at 
> org.eclipse.jetty.servlet.ServletContextHandler.doStart(ServletContextHandler.java:262)
>  at org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:522) at 
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>  at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:131)
>  at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:113)
>  at 
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:61)
>  at 
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>  at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:131)
>  at org.eclipse.jetty.server.Server.start(Server.java:427) at 
> org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:105)
>  at 
> org.eclipse.jetty.server.handler.AbstractHandler.doStart(AbstractHandler.java:61)
>  at org.eclipse.jetty.server.Server.doStart(Server.java:394) at 
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)
>  at org.apache.hadoop.http.HttpServer2.start(HttpServer2.java:1140) at 
> org.apache.hadoop.hdds.server.BaseHttpServer.start(BaseHttpServer.java:175) 
> at org.apache.hadoop.ozone.recon.ReconServer.call(ReconServer.java:102) at 
> org.apache.hadoop.ozone.recon.ReconServer.call(ReconServer.java:50) at 
> picocli.CommandLine.execute(CommandLine.java:1173) at 
> picocli.CommandLine.access$800(CommandLine.java:141) at 
> picocli.CommandLine$RunLast.handle(CommandLine.java:1367) at 
> picocli.CommandLine$RunLast.handle(CommandLine.java:1335) at 
> picocli.CommandLine$AbstractParseResultHandler.handleParseResult(CommandLine.java:1243)
>  at picocli.CommandLine.parseWithHandlers(CommandLine.java:1526) at 
> picocli.CommandLine.parseWithHandler(CommandLine.java:1465) at 
> org.apache.hadoop.hdds.cli.GenericCli.execute(GenericCli.java:65) at 
> org.apache.hadoop.hdds.cli.GenericCli.run(GenericCli.java:56) at 
> org.apache.hadoop.ozone.recon.ReconServer.main(ReconServer.java:61)
> {code}



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to