yuandeqiao created AMBARI-23356:
-----------------------------------
Summary: Api Error: Unable to authenticate
Key: AMBARI-23356
URL: https://issues.apache.org/jira/browse/AMBARI-23356
Project: Ambari
Issue Type: Test
Reporter: yuandeqiao
×
*kdc principal and distribule to other node --> addprinc -randkey
[hue/[email protected]|mailto:hue/[email protected]]*
*hue --> Api Error: Unable to authenticate*
*hbase thrift -->*
*2018-03-26 15:13:35,596 INFO [main] util.VersionInfo: HBase 1.1.2.2.6.3.0-235*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Source code repository
git://ctr-e134-1499953498516-254436-01-000003.hwx.site/grid/0/jenkins/workspace/HDP-parallel-centos6/SOURCES/hbase
revision=6f982c8e667e7a18451fcbc12c5e2758b178ec78*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Compiled by jenkins on
Mon Oct 30 02:53:33 UTC 2017*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: From source with
checksum a3bd627e46a9a94cd352d7e907100bb5*
*2018-03-26 15:13:36,047 INFO [main] thrift.ThriftServerRunner: Using default
thrift server type*
*2018-03-26 15:13:36,048 INFO [main] thrift.ThriftServerRunner: Using thrift
server type threadpool*
*2018-03-26 15:13:36,613 INFO [main] security.UserGroupInformation: Login
successful for user hbase/[email protected] using keytab file
/etc/security/keytabs/hbase.service.keytab*
*2018-03-26 15:13:36,710 INFO [main] impl.MetricsConfig: loaded properties from
hadoop-metrics2-hbase.properties*
*2018-03-26 15:13:36,910 INFO [main] timeline.HadoopTimelineMetricsSink:
Initializing Timeline metrics sink.*
*2018-03-26 15:13:36,911 INFO [main] timeline.HadoopTimelineMetricsSink:
Identified hostname = master3.test, serviceName = hbase*
*2018-03-26 15:13:36,965 INFO [main]
availability.MetricSinkWriteShardHostnameHashingStrategy: Calculated collector
shard master2.test based on hostname: master3.test*
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
Collector Uri: http://master2.test:6188/ws/v1/timeline/metrics*
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
Container Metrics Uri: http://master2.test:6188/ws/v1/timeline/containermetrics*
*2018-03-26 15:13:36,975 INFO [main] impl.MetricsSinkAdapter: Sink timeline
started*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: Scheduled snapshot
period at 10 second(s).*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: HBase metrics
system started*
*2018-03-26 15:13:37,124 INFO [main] mortbay.log: Logging to
org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via org.mortbay.log.Slf4jLog*
*2018-03-26 15:13:37,127 INFO [main] http.HttpRequestLog: Http request log for
http.requests.thrift is not defined*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
'safety' (class=org.apache.hadoop.hbase.http.HttpServer$QuotingInputFilter)*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
'clickjackingprevention'
(class=org.apache.hadoop.hbase.http.ClickjackingPreventionFilter)*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context thrift*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context logs*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context static*
*2018-03-26 15:13:37,156 INFO [main] http.HttpServer: Jetty bound to port 9095*
*2018-03-26 15:13:37,156 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,459 INFO [main] mortbay.log: Started
[email protected]:9095*
*2018-03-26 15:13:37,486 INFO [main] thrift.ThriftServerRunner: Starting Thrift
HTTP Server on 9090*
*2018-03-26 15:13:37,486 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,490 INFO [main] mortbay.log: Started
[email protected]:9090*
*2018-03-26 15:13:46,228 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,229 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
*at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
*at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
*at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
*at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
*at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
*at org.mortbay.jetty.Server.handle(Server.java:326)*
*at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
*at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
*at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
*at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
*at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
*at
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
*at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
*... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
Authorization header received from the client is empty.*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.getAuthHeader(ThriftHttpServlet.java:212)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:176)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
*at java.security.AccessController.doPrivileged(Native Method)*
*at javax.security.auth.Subject.doAs(Subject.java:422)*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
*... 17 more*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
*at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
*at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
*at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
*at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
*at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
*at org.mortbay.jetty.Server.handle(Server.java:326)*
*at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
*at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
*at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
*at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
*at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
*at
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
*at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
*... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
Kerberos authentication failed:*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:190)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
*at java.security.AccessController.doPrivileged(Native Method)*
*at javax.security.auth.Subject.doAs(Subject.java:422)*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
*... 17 more*
*Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism
level: Checksum failed)*
*at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:856)*
*at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)*
*at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:178)*
*... 21 more*
*Caused by: KrbException: Checksum failed*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:102)*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:94)*
*at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:175)*
*at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:281)*
*at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:149)*
*at
sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108)*
*at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:829)*
*... 24 more*
*Caused by: java.security.GeneralSecurityException: Checksum failed*
*at
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451)*
*at
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decrypt(AesDkCrypto.java:272)*
*at sun.security.krb5.internal.crypto.Aes256.decrypt(Aes256.java:76)*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:100)*
*... 30 more*
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)