[
https://issues.apache.org/jira/browse/AMBARI-23356?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
yuandeqiao updated AMBARI-23356:
--------------------------------
Description:
×
hbase master --> sudo -u hbase kinit -kt
/etc/security/keytabs/hbase.service.keytab hbase/[email protected]
nohup sudo -u hbase hbase thrift start > /data/hbase_thritf_start_log.log 2>&1
&
client – > kinit -kt /etc/security/keytabs/hue.service.keytab
[hue/[email protected]|mailto:hue/[email protected]]
nohup /usr/local/hue/build/env/bin/hue runserver 0.0.0.0:8888 >
/usr/local/hue/hue.log 2>&1 &
*kdc principal and distribule to other node --> addprinc -randkey
[hue/[email protected]|mailto:hue/[email protected]]*
*hue --> Api Error: Unable to authenticate*
*hbase thrift -->*
*2018-03-26 15:13:35,596 INFO [main] util.VersionInfo: HBase 1.1.2.2.6.3.0-235*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Source code repository
git://ctr-e134-1499953498516-254436-01-000003.hwx.site/grid/0/jenkins/workspace/HDP-parallel-centos6/SOURCES/hbase
revision=6f982c8e667e7a18451fcbc12c5e2758b178ec78*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Compiled by jenkins on
Mon Oct 30 02:53:33 UTC 2017*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: From source with
checksum a3bd627e46a9a94cd352d7e907100bb5*
*2018-03-26 15:13:36,047 INFO [main] thrift.ThriftServerRunner: Using default
thrift server type*
*2018-03-26 15:13:36,048 INFO [main] thrift.ThriftServerRunner: Using thrift
server type threadpool*
*2018-03-26 15:13:36,613 INFO [main] security.UserGroupInformation: Login
successful for user hbase/[email protected] using keytab file
/etc/security/keytabs/hbase.service.keytab*
*2018-03-26 15:13:36,710 INFO [main] impl.MetricsConfig: loaded properties
from hadoop-metrics2-hbase.properties*
*2018-03-26 15:13:36,910 INFO [main] timeline.HadoopTimelineMetricsSink:
Initializing Timeline metrics sink.*
*2018-03-26 15:13:36,911 INFO [main] timeline.HadoopTimelineMetricsSink:
Identified hostname = master3.test, serviceName = hbase*
*2018-03-26 15:13:36,965 INFO [main]
availability.MetricSinkWriteShardHostnameHashingStrategy: Calculated collector
shard master2.test based on hostname: master3.test*
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
Collector Uri: [http://master2.test:6188/ws/v1/timeline/metrics*]
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
Container Metrics Uri:
[http://master2.test:6188/ws/v1/timeline/containermetrics*]
*2018-03-26 15:13:36,975 INFO [main] impl.MetricsSinkAdapter: Sink timeline
started*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: Scheduled
snapshot period at 10 second(s).*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: HBase metrics
system started*
*2018-03-26 15:13:37,124 INFO [main] mortbay.log: Logging to
org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via org.mortbay.log.Slf4jLog*
*2018-03-26 15:13:37,127 INFO [main] http.HttpRequestLog: Http request log for
http.requests.thrift is not defined*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
'safety' (class=org.apache.hadoop.hbase.http.HttpServer$QuotingInputFilter)*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
'clickjackingprevention'
(class=org.apache.hadoop.hbase.http.ClickjackingPreventionFilter)*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context thrift*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context logs*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context static*
*2018-03-26 15:13:37,156 INFO [main] http.HttpServer: Jetty bound to port 9095*
*2018-03-26 15:13:37,156 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,459 INFO [main] mortbay.log: Started
[email protected]:9095*
*2018-03-26 15:13:37,486 INFO [main] thrift.ThriftServerRunner: Starting
Thrift HTTP Server on 9090*
*2018-03-26 15:13:37,486 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,490 INFO [main] mortbay.log: Started
[email protected]:9090*
*2018-03-26 15:13:46,228 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,229 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
*at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
*at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
*at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
*at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
*at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
*at org.mortbay.jetty.Server.handle(Server.java:326)*
*at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
*at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
*at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
*at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
*at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
*at
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
*at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
*... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
Authorization header received from the client is empty.*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.getAuthHeader(ThriftHttpServlet.java:212)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:176)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
*at java.security.AccessController.doPrivileged(Native Method)*
*at javax.security.auth.Subject.doAs(Subject.java:422)*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
*... 17 more*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
*at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
*at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
*at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
*at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
*at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
*at org.mortbay.jetty.Server.handle(Server.java:326)*
*at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
*at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
*at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
*at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
*at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
*at
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
*at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
*... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
Kerberos authentication failed:*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:190)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
*at java.security.AccessController.doPrivileged(Native Method)*
*at javax.security.auth.Subject.doAs(Subject.java:422)*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
*... 17 more*
*Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism
level: Checksum failed)*
*at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:856)*
*at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)*
*at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:178)*
*... 21 more*
*Caused by: KrbException: Checksum failed*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:102)*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:94)*
*at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:175)*
*at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:281)*
*at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:149)*
*at
sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108)*
*at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:829)*
*... 24 more*
*Caused by: java.security.GeneralSecurityException: Checksum failed*
*at
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451)*
*at
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decrypt(AesDkCrypto.java:272)*
*at sun.security.krb5.internal.crypto.Aes256.decrypt(Aes256.java:76)*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:100)*
*... 30 more*
was:
×
*kdc principal and distribule to other node --> addprinc -randkey
[hue/[email protected]|mailto:hue/[email protected]]*
*hue --> Api Error: Unable to authenticate*
*hbase thrift -->*
*2018-03-26 15:13:35,596 INFO [main] util.VersionInfo: HBase 1.1.2.2.6.3.0-235*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Source code repository
git://ctr-e134-1499953498516-254436-01-000003.hwx.site/grid/0/jenkins/workspace/HDP-parallel-centos6/SOURCES/hbase
revision=6f982c8e667e7a18451fcbc12c5e2758b178ec78*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Compiled by jenkins on
Mon Oct 30 02:53:33 UTC 2017*
*2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: From source with
checksum a3bd627e46a9a94cd352d7e907100bb5*
*2018-03-26 15:13:36,047 INFO [main] thrift.ThriftServerRunner: Using default
thrift server type*
*2018-03-26 15:13:36,048 INFO [main] thrift.ThriftServerRunner: Using thrift
server type threadpool*
*2018-03-26 15:13:36,613 INFO [main] security.UserGroupInformation: Login
successful for user hbase/[email protected] using keytab file
/etc/security/keytabs/hbase.service.keytab*
*2018-03-26 15:13:36,710 INFO [main] impl.MetricsConfig: loaded properties from
hadoop-metrics2-hbase.properties*
*2018-03-26 15:13:36,910 INFO [main] timeline.HadoopTimelineMetricsSink:
Initializing Timeline metrics sink.*
*2018-03-26 15:13:36,911 INFO [main] timeline.HadoopTimelineMetricsSink:
Identified hostname = master3.test, serviceName = hbase*
*2018-03-26 15:13:36,965 INFO [main]
availability.MetricSinkWriteShardHostnameHashingStrategy: Calculated collector
shard master2.test based on hostname: master3.test*
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
Collector Uri: http://master2.test:6188/ws/v1/timeline/metrics*
*2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
Container Metrics Uri: http://master2.test:6188/ws/v1/timeline/containermetrics*
*2018-03-26 15:13:36,975 INFO [main] impl.MetricsSinkAdapter: Sink timeline
started*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: Scheduled snapshot
period at 10 second(s).*
*2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: HBase metrics
system started*
*2018-03-26 15:13:37,124 INFO [main] mortbay.log: Logging to
org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via org.mortbay.log.Slf4jLog*
*2018-03-26 15:13:37,127 INFO [main] http.HttpRequestLog: Http request log for
http.requests.thrift is not defined*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
'safety' (class=org.apache.hadoop.hbase.http.HttpServer$QuotingInputFilter)*
*2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
'clickjackingprevention'
(class=org.apache.hadoop.hbase.http.ClickjackingPreventionFilter)*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context thrift*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context logs*
*2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
static_user_filter
(class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
to context static*
*2018-03-26 15:13:37,156 INFO [main] http.HttpServer: Jetty bound to port 9095*
*2018-03-26 15:13:37,156 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,459 INFO [main] mortbay.log: Started
[email protected]:9095*
*2018-03-26 15:13:37,486 INFO [main] thrift.ThriftServerRunner: Starting Thrift
HTTP Server on 9090*
*2018-03-26 15:13:37,486 INFO [main] mortbay.log: jetty-6.1.26.hwx*
*2018-03-26 15:13:37,490 INFO [main] mortbay.log: Started
[email protected]:9090*
*2018-03-26 15:13:46,228 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,229 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
*at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
*at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
*at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
*at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
*at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
*at org.mortbay.jetty.Server.handle(Server.java:326)*
*at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
*at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
*at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
*at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
*at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
*at
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
*at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
*... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
Authorization header received from the client is empty.*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.getAuthHeader(ThriftHttpServlet.java:212)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:176)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
*at java.security.AccessController.doPrivileged(Native Method)*
*at javax.security.auth.Subject.doAs(Subject.java:422)*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
*... 17 more*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Failed to perform authentication*
*2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
thrift.ThriftHttpServlet: Kerberos Authentication failed*
*org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
*at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
*at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
*at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
*at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
*at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
*at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
*at org.mortbay.jetty.Server.handle(Server.java:326)*
*at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
*at
org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
*at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
*at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
*at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
*at
org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
*at
org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
*Caused by: java.lang.reflect.UndeclaredThrowableException*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
*... 16 more*
*Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
Kerberos authentication failed:*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:190)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
*at java.security.AccessController.doPrivileged(Native Method)*
*at javax.security.auth.Subject.doAs(Subject.java:422)*
*at
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
*... 17 more*
*Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism
level: Checksum failed)*
*at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:856)*
*at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)*
*at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)*
*at
org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:178)*
*... 21 more*
*Caused by: KrbException: Checksum failed*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:102)*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:94)*
*at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:175)*
*at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:281)*
*at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:149)*
*at
sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108)*
*at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:829)*
*... 24 more*
*Caused by: java.security.GeneralSecurityException: Checksum failed*
*at
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451)*
*at
sun.security.krb5.internal.crypto.dk.AesDkCrypto.decrypt(AesDkCrypto.java:272)*
*at sun.security.krb5.internal.crypto.Aes256.decrypt(Aes256.java:76)*
*at
sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:100)*
*... 30 more*
> Api Error: Unable to authenticate
> ---------------------------------
>
> Key: AMBARI-23356
> URL: https://issues.apache.org/jira/browse/AMBARI-23356
> Project: Ambari
> Issue Type: Test
> Reporter: yuandeqiao
> Priority: Major
>
> ×
> hbase master --> sudo -u hbase kinit -kt
> /etc/security/keytabs/hbase.service.keytab hbase/[email protected]
> nohup sudo -u hbase hbase thrift start > /data/hbase_thritf_start_log.log
> 2>&1 &
>
> client – > kinit -kt /etc/security/keytabs/hue.service.keytab
> [hue/[email protected]|mailto:hue/[email protected]]
> nohup /usr/local/hue/build/env/bin/hue runserver 0.0.0.0:8888 >
> /usr/local/hue/hue.log 2>&1 &
>
> *kdc principal and distribule to other node --> addprinc -randkey
> [hue/[email protected]|mailto:hue/[email protected]]*
>
>
>
> *hue --> Api Error: Unable to authenticate*
>
>
> *hbase thrift -->*
>
>
> *2018-03-26 15:13:35,596 INFO [main] util.VersionInfo: HBase
> 1.1.2.2.6.3.0-235*
> *2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Source code
> repository
> git://ctr-e134-1499953498516-254436-01-000003.hwx.site/grid/0/jenkins/workspace/HDP-parallel-centos6/SOURCES/hbase
> revision=6f982c8e667e7a18451fcbc12c5e2758b178ec78*
> *2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: Compiled by jenkins
> on Mon Oct 30 02:53:33 UTC 2017*
> *2018-03-26 15:13:35,606 INFO [main] util.VersionInfo: From source with
> checksum a3bd627e46a9a94cd352d7e907100bb5*
> *2018-03-26 15:13:36,047 INFO [main] thrift.ThriftServerRunner: Using
> default thrift server type*
> *2018-03-26 15:13:36,048 INFO [main] thrift.ThriftServerRunner: Using thrift
> server type threadpool*
> *2018-03-26 15:13:36,613 INFO [main] security.UserGroupInformation: Login
> successful for user hbase/[email protected] using keytab file
> /etc/security/keytabs/hbase.service.keytab*
> *2018-03-26 15:13:36,710 INFO [main] impl.MetricsConfig: loaded properties
> from hadoop-metrics2-hbase.properties*
> *2018-03-26 15:13:36,910 INFO [main] timeline.HadoopTimelineMetricsSink:
> Initializing Timeline metrics sink.*
> *2018-03-26 15:13:36,911 INFO [main] timeline.HadoopTimelineMetricsSink:
> Identified hostname = master3.test, serviceName = hbase*
> *2018-03-26 15:13:36,965 INFO [main]
> availability.MetricSinkWriteShardHostnameHashingStrategy: Calculated
> collector shard master2.test based on hostname: master3.test*
> *2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
> Collector Uri: [http://master2.test:6188/ws/v1/timeline/metrics*]
> *2018-03-26 15:13:36,966 INFO [main] timeline.HadoopTimelineMetricsSink:
> Container Metrics Uri:
> [http://master2.test:6188/ws/v1/timeline/containermetrics*]
> *2018-03-26 15:13:36,975 INFO [main] impl.MetricsSinkAdapter: Sink timeline
> started*
> *2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: Scheduled
> snapshot period at 10 second(s).*
> *2018-03-26 15:13:37,025 INFO [main] impl.MetricsSystemImpl: HBase metrics
> system started*
> *2018-03-26 15:13:37,124 INFO [main] mortbay.log: Logging to
> org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via
> org.mortbay.log.Slf4jLog*
> *2018-03-26 15:13:37,127 INFO [main] http.HttpRequestLog: Http request log
> for http.requests.thrift is not defined*
> *2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
> 'safety' (class=org.apache.hadoop.hbase.http.HttpServer$QuotingInputFilter)*
> *2018-03-26 15:13:37,135 INFO [main] http.HttpServer: Added global filter
> 'clickjackingprevention'
> (class=org.apache.hadoop.hbase.http.ClickjackingPreventionFilter)*
> *2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
> static_user_filter
> (class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
> to context thrift*
> *2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
> static_user_filter
> (class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
> to context logs*
> *2018-03-26 15:13:37,137 INFO [main] http.HttpServer: Added filter
> static_user_filter
> (class=org.apache.hadoop.hbase.http.lib.StaticUserWebFilter$StaticUserFilter)
> to context static*
> *2018-03-26 15:13:37,156 INFO [main] http.HttpServer: Jetty bound to port
> 9095*
> *2018-03-26 15:13:37,156 INFO [main] mortbay.log: jetty-6.1.26.hwx*
> *2018-03-26 15:13:37,459 INFO [main] mortbay.log: Started
> [email protected]:9095*
> *2018-03-26 15:13:37,486 INFO [main] thrift.ThriftServerRunner: Starting
> Thrift HTTP Server on 9090*
> *2018-03-26 15:13:37,486 INFO [main] mortbay.log: jetty-6.1.26.hwx*
> *2018-03-26 15:13:37,490 INFO [main] mortbay.log: Started
> [email protected]:9090*
> *2018-03-26 15:13:46,228 ERROR [375074687@qtp-890160158-0]
> thrift.ThriftHttpServlet: Failed to perform authentication*
> *2018-03-26 15:13:46,229 ERROR [375074687@qtp-890160158-0]
> thrift.ThriftHttpServlet: Kerberos Authentication failed*
> *org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
> java.lang.reflect.UndeclaredThrowableException*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
> *at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
> *at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
> *at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
> *at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
> *at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
> *at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
> *at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
> *at org.mortbay.jetty.Server.handle(Server.java:326)*
> *at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
> *at
> org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
> *at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
> *at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
> *at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
> *at
> org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
> *at
> org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
> *Caused by: java.lang.reflect.UndeclaredThrowableException*
> *at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
> *... 16 more*
> *Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
> Authorization header received from the client is empty.*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.getAuthHeader(ThriftHttpServlet.java:212)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:176)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
> *at java.security.AccessController.doPrivileged(Native Method)*
> *at javax.security.auth.Subject.doAs(Subject.java:422)*
> *at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
> *... 17 more*
> *2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
> thrift.ThriftHttpServlet: Failed to perform authentication*
> *2018-03-26 15:13:46,251 ERROR [375074687@qtp-890160158-0]
> thrift.ThriftHttpServlet: Kerberos Authentication failed*
> *org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
> java.lang.reflect.UndeclaredThrowableException*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:139)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doPost(ThriftHttpServlet.java:86)*
> *at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)*
> *at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)*
> *at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)*
> *at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:401)*
> *at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)*
> *at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:766)*
> *at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)*
> *at org.mortbay.jetty.Server.handle(Server.java:326)*
> *at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:542)*
> *at
> org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:945)*
> *at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:756)*
> *at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)*
> *at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:404)*
> *at
> org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:410)*
> *at
> org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)*
> *Caused by: java.lang.reflect.UndeclaredThrowableException*
> *at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1884)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet.doKerberosAuth(ThriftHttpServlet.java:134)*
> *... 16 more*
> *Caused by: org.apache.hadoop.hbase.thrift.HttpAuthenticationException:
> Kerberos authentication failed:*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:190)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:144)*
> *at java.security.AccessController.doPrivileged(Native Method)*
> *at javax.security.auth.Subject.doAs(Subject.java:422)*
> *at
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1866)*
> *... 17 more*
> *Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism
> level: Checksum failed)*
> *at
> sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:856)*
> *at
> sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)*
> *at
> sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)*
> *at
> org.apache.hadoop.hbase.thrift.ThriftHttpServlet$HttpKerberosServerAction.run(ThriftHttpServlet.java:178)*
> *... 21 more*
> *Caused by: KrbException: Checksum failed*
> *at
> sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:102)*
> *at
> sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:94)*
> *at sun.security.krb5.EncryptedData.decrypt(EncryptedData.java:175)*
> *at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:281)*
> *at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:149)*
> *at
> sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108)*
> *at
> sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:829)*
> *... 24 more*
> *Caused by: java.security.GeneralSecurityException: Checksum failed*
> *at
> sun.security.krb5.internal.crypto.dk.AesDkCrypto.decryptCTS(AesDkCrypto.java:451)*
> *at
> sun.security.krb5.internal.crypto.dk.AesDkCrypto.decrypt(AesDkCrypto.java:272)*
> *at sun.security.krb5.internal.crypto.Aes256.decrypt(Aes256.java:76)*
> *at
> sun.security.krb5.internal.crypto.Aes256CtsHmacSha1EType.decrypt(Aes256CtsHmacSha1EType.java:100)*
> *... 30 more*
>
>
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
