[
https://issues.apache.org/jira/browse/HBASE-20859?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Wei-Chiu Chuang updated HBASE-20859:
------------------------------------
Description:
HBase Backup and incremental load uses
HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY for temporary path.
HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY uses the Java runtime user name to
generate a temporary path on HDFS. This can be a wrong assumption in a secure
cluster where Kerberos principal name can be different from the system user
name.
{code:java}
public static final String DEFAULT_TEMPORARY_HDFS_DIRECTORY = "/user/"
+ System.getProperty("user.name") + "/hbase-staging";
{code}
This constant variable is used in BackupUtils.java and HFileOutputFormat2.java
In such cases, you will not be able to write files to the temporary location on
HDFS due to permission error, and therefore operations such as backup will fail.
This bug is similar in nature to HDFS-12485.
was:
HBase Backup and incremental load uses
HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY for temporary path.
HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY incorrectly uses the Java runtime
user name to generate a temporary path on HDFS. This can be a wrong assumption
in a secure cluster where Kerberos principal name is different from the system
user name.
{code:java}
public static final String DEFAULT_TEMPORARY_HDFS_DIRECTORY = "/user/"
+ System.getProperty("user.name") + "/hbase-staging";
{code}
This constant variable is used in BackupUtils.java and HFileOutputFormat2.java
In such cases, you will not be able to write files to the temporary location on
HDFS due to permission error, and therefore operations such as backup will fail.
This bug is similar in nature to HDFS-12485.
> Backup and incremental load could fail in secure clusters
> ---------------------------------------------------------
>
> Key: HBASE-20859
> URL: https://issues.apache.org/jira/browse/HBASE-20859
> Project: HBase
> Issue Type: Bug
> Components: backup&restore
> Affects Versions: 3.0.0
> Reporter: Wei-Chiu Chuang
> Assignee: Wei-Chiu Chuang
> Priority: Major
> Attachments: HBASE-20859.master.001.patch,
> HBASE-20859.master.002.patch
>
>
> HBase Backup and incremental load uses
> HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY for temporary path.
> HConstants.DEFAULT_TEMPORARY_HDFS_DIRECTORY uses the Java runtime user name
> to generate a temporary path on HDFS. This can be a wrong assumption in a
> secure cluster where Kerberos principal name can be different from the system
> user name.
> {code:java}
> public static final String DEFAULT_TEMPORARY_HDFS_DIRECTORY = "/user/"
> + System.getProperty("user.name") + "/hbase-staging";
> {code}
> This constant variable is used in BackupUtils.java and HFileOutputFormat2.java
> In such cases, you will not be able to write files to the temporary location
> on HDFS due to permission error, and therefore operations such as backup will
> fail.
> This bug is similar in nature to HDFS-12485.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
