[
https://issues.apache.org/jira/browse/HDFS-5627?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13838778#comment-13838778
]
Vinay commented on HDFS-5627:
-----------------------------
When checked the code,
{{DFSUtil#getInfoServer}} is always used with {{https}} as false.
And So, fsck and checkpointers are trying to checkpoint to http port with https
schema.
Ideally, {{DFSUtil#getInfoServer}} should return the address based on
configuration whether https is enabled or not.
> FSCK and checkpoint not working when kerberos security+https is enabled.
> ------------------------------------------------------------------------
>
> Key: HDFS-5627
> URL: https://issues.apache.org/jira/browse/HDFS-5627
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: namenode
> Reporter: Vinay
> Priority: Blocker
>
> {noformat}Connecting to namenode via https://<nn-ip>:50070
> 13/12/04 15:00:48 ERROR security.UserGroupInformation:
> PriviledgedActionException as:vinay/had...@hadoop.com (auth:KERBEROS)
> cause:javax.net.ssl.SSLException: Unrecognized SSL message, plaintext
> connection?
> Exception in thread "main" javax.net.ssl.SSLException: Unrecognized SSL
> message, plaintext connection?
> at
> com.sun.net.ssl.internal.ssl.InputRecord.handleUnknownRecord(InputRecord.java:523)
> at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:355)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:830)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1170)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1197)
> at
> com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1181)
> at
> sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
> at
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
> at
> sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:133)
> at
> org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:186)
> at
> org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:232)
> at
> org.apache.hadoop.hdfs.web.URLConnectionFactory.openConnection(URLConnectionFactory.java:164)
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.1#6144)
