[
https://issues.apache.org/jira/browse/AMBARI-22819?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eugene Chekanskiy updated AMBARI-22819:
---------------------------------------
Description:
Post disabling the kerberos Ambari is not deleting the storm_jaas.conf and
client_jaas.conf files from storm conf directory.
Offset lag section in Storm UI is not populating because of the jaas conf.
{code}
Unable to get offset lags for kafka. Reason:
org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode =
AuthFailed for /brokers/topics/hortonworks/partitions at
org.apache.zookeeper.KeeperException.create(KeeperException.java:123) at
org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at
org.apache.zookeeper.ZooKeeper.getChildren(ZooKeeper.java:1590) at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:230)
at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:219)
at org.apache.curator.shaded.RetryLoop.callWithRetry(RetryLoop.java:109) at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.pathInForeground(GetChildrenBuilderImpl.java:216)
at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:207)
at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:40)
at
org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getLeadersAndTopicPartitions(KafkaOffsetLagUtil.java:323)
at
org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getOffsetLags(KafkaOffsetLagUtil.java:257)
at
org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.main(KafkaOffsetLagUtil.java:126)
{code}
Storm's /usr/hdp/current/storm-client/bin/storm-kafka-monitor checks if the
storm_jaas.conf exists in storm configuration directory and then uses it.
{code:java}
STORM_JAAS_CONF_PARAM=""
JAAS_FILE="${STORM_CONF_DIR}/storm_jaas.conf"
if [ -f $JAAS_FILE ]; then
STORM_JAAS_CONF_PARAM="-Djava.security.auth.login.config=${JAAS_FILE}"
fi
{code}
Issue will be resolved if we delete the storm_jaas.conf file manually.
As well storm jaas configs must be readable by world to allow some mpacks work
properly.
was:
Post disabling the kerberos Ambari is not deleting the storm_jaas.conf and
client_jaas.conf files from storm conf directory.
Offset lag section in Storm UI is not populating because of the jaas conf.
{code}
Unable to get offset lags for kafka. Reason:
org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode =
AuthFailed for /brokers/topics/hortonworks/partitions at
org.apache.zookeeper.KeeperException.create(KeeperException.java:123) at
org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at
org.apache.zookeeper.ZooKeeper.getChildren(ZooKeeper.java:1590) at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:230)
at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:219)
at org.apache.curator.shaded.RetryLoop.callWithRetry(RetryLoop.java:109) at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.pathInForeground(GetChildrenBuilderImpl.java:216)
at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:207)
at
org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:40)
at
org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getLeadersAndTopicPartitions(KafkaOffsetLagUtil.java:323)
at
org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getOffsetLags(KafkaOffsetLagUtil.java:257)
at
org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.main(KafkaOffsetLagUtil.java:126)
{code}
Storm's /usr/hdp/current/storm-client/bin/storm-kafka-monitor checks if the
storm_jaas.conf exists in storm configuration directory and then uses it.
{code:java}
STORM_JAAS_CONF_PARAM=""
JAAS_FILE="${STORM_CONF_DIR}/storm_jaas.conf"
if [ -f $JAAS_FILE ]; then
STORM_JAAS_CONF_PARAM="-Djava.security.auth.login.config=${JAAS_FILE}"
fi
{code}
Issue will be resolved if we delete the storm_jaas.conf file manually.
> Issues with storm jaas files and recursive ch_(mod/own) calls
> -------------------------------------------------------------
>
> Key: AMBARI-22819
> URL: https://issues.apache.org/jira/browse/AMBARI-22819
> Project: Ambari
> Issue Type: Bug
> Components: security
> Affects Versions: 2.5.1
> Reporter: Sandeep Nemuri
> Assignee: Eugene Chekanskiy
> Priority: Major
>
> Post disabling the kerberos Ambari is not deleting the storm_jaas.conf and
> client_jaas.conf files from storm conf directory.
> Offset lag section in Storm UI is not populating because of the jaas conf.
> {code}
> Unable to get offset lags for kafka. Reason:
> org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode =
> AuthFailed for /brokers/topics/hortonworks/partitions at
> org.apache.zookeeper.KeeperException.create(KeeperException.java:123) at
> org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at
> org.apache.zookeeper.ZooKeeper.getChildren(ZooKeeper.java:1590) at
> org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:230)
> at
> org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:219)
> at org.apache.curator.shaded.RetryLoop.callWithRetry(RetryLoop.java:109) at
> org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.pathInForeground(GetChildrenBuilderImpl.java:216)
> at
> org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:207)
> at
> org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:40)
> at
> org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getLeadersAndTopicPartitions(KafkaOffsetLagUtil.java:323)
> at
> org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getOffsetLags(KafkaOffsetLagUtil.java:257)
> at
> org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.main(KafkaOffsetLagUtil.java:126)
> {code}
> Storm's /usr/hdp/current/storm-client/bin/storm-kafka-monitor checks if the
> storm_jaas.conf exists in storm configuration directory and then uses it.
> {code:java}
> STORM_JAAS_CONF_PARAM=""
> JAAS_FILE="${STORM_CONF_DIR}/storm_jaas.conf"
> if [ -f $JAAS_FILE ]; then
> STORM_JAAS_CONF_PARAM="-Djava.security.auth.login.config=${JAAS_FILE}"
> fi
> {code}
> Issue will be resolved if we delete the storm_jaas.conf file manually.
> As well storm jaas configs must be readable by world to allow some mpacks
> work properly.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
