[
https://issues.apache.org/jira/browse/IGNITE-23563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ivan Daschinsky updated IGNITE-23563:
-------------------------------------
Description:
{code:java}
2024-10-25 11:53:38.804 [ERROR][disco-notifier-worker-#67][] Critical system
error detected. Will be handled accordingly to configured handler
[hnd=StopNodeOrHaltFailureHandler [tryStop=false, timeout=0,
super=AbstractFailureHandler [ignoredFailureTypes=UnmodifiableSet
[SYSTEM_WORKER_BLOCKED, SYSTEM_CRITICAL_OPERATION_TIMEOUT]]],
failureCtx=FailureContext [type=SYSTEM_WORKER_TERMINATION, err=class
o.a.i.plugin.security.SecurityException: Authorization failed
[perm=ADMIN_CLUSTER_STATE, name=null, login=<some_login>]]]
org.apache.ignite.plugin.security.SecurityException: Authorization failed
[perm=ADMIN_CLUSTER_STATE, name=null, login=ise_server]
at
com.sbt.security.ignite.core.SecurityProcessorImpl.authorize(SecurityProcessorImpl.java:495)
at
org.apache.ignite.internal.processors.security.IgniteSecurityProcessor.authorize(IgniteSecurityProcessor.java:244)
at
org.apache.ignite.internal.processors.security.IgniteSecurity.authorize(IgniteSecurity.java:119)
at
org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.changeGlobalState(GridClusterStateProcessor.java:1111)
at
org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.changeGlobalState(GridClusterStateProcessor.java:1028)
at
org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.onLocalJoin(GridClusterStateProcessor.java:551)
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3.onDiscovery0(GridDiscoveryManager.java:812)
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3$NotificationTask.run(GridDiscoveryManager.java:977)
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3$SecurityAwareNotificationTask.run(GridDiscoveryManager.java:958)
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$DiscoveryMessageNotifierWorker.body0(GridDiscoveryManager.java:2833)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$DiscoveryMessageNotifierWorker.body(GridDiscoveryManager.java:2871)
[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.util.worker.GridWorker.run(GridWorker.java:125)
[ignite-core-16.1.1.jar:16.1.1]
at java.base/java.lang.Thread.run(Thread.java:829) [?:?]
Caused by: org.apache.ignite.plugin.security.SecurityException: Operation is
not allowed [rsrcName=null, perm=ADMIN_CLUSTER_STATE, login=ise_server]
at
com.sbt.security.ignite.core.authorizer.SecurityAuthorizerImpl.authorize(SecurityAuthorizerImpl.java:64)
~[security-core-16.1.1.jar:16.1.1]
at
com.sbt.security.ignite.core.SecurityProcessorImpl.authorize(SecurityProcessorImpl.java:484)
~[security-core-16.1.1.jar:16.1.1]
... 12 more
2024-10-25 11:53:38.814 [ERROR][disco-notifier-worker-#67][] JVM will be halted
immediately due to the failure: [failureCtx=FailureContext
[type=SYSTEM_WORKER_TERMINATION, err=class
o.a.i.plugin.security.SecurityException: Authorization failed
[perm=ADMIN_CLUSTER_STATE, name=null, login=ise_server]]]
{code}
was:
{code:java}
2024-10-25 11:53:38.804 [ERROR][disco-notifier-worker-#67][] Critical system
error detected. Will be handled accordingly to configured handler
[hnd=StopNodeOrHaltFailureHandler [tryStop=false, timeout=0,
super=AbstractFailureHandler [ignoredFailureTypes=UnmodifiableSet
[SYSTEM_WORKER_BLOCKED, SYSTEM_CRITICAL_OPERATION_TIMEOUT]]],
failureCtx=FailureContext [type=SYSTEM_WORKER_TERMINATION, err=class
o.a.i.plugin.security.SecurityException: Authorization failed
[perm=ADMIN_CLUSTER_STATE, name=null, login=ise_server]]]
org.apache.ignite.plugin.security.SecurityException: Authorization failed
[perm=ADMIN_CLUSTER_STATE, name=null, login=ise_server]
at
com.sbt.security.ignite.core.SecurityProcessorImpl.authorize(SecurityProcessorImpl.java:495)
~[security-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.processors.security.IgniteSecurityProcessor.authorize(IgniteSecurityProcessor.java:244)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.processors.security.IgniteSecurity.authorize(IgniteSecurity.java:119)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.changeGlobalState(GridClusterStateProcessor.java:1111)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.changeGlobalState(GridClusterStateProcessor.java:1028)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.onLocalJoin(GridClusterStateProcessor.java:551)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3.onDiscovery0(GridDiscoveryManager.java:812)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3$NotificationTask.run(GridDiscoveryManager.java:977)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3$SecurityAwareNotificationTask.run(GridDiscoveryManager.java:958)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$DiscoveryMessageNotifierWorker.body0(GridDiscoveryManager.java:2833)
~[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$DiscoveryMessageNotifierWorker.body(GridDiscoveryManager.java:2871)
[ignite-core-16.1.1.jar:16.1.1]
at
org.apache.ignite.internal.util.worker.GridWorker.run(GridWorker.java:125)
[ignite-core-16.1.1.jar:16.1.1]
at java.base/java.lang.Thread.run(Thread.java:829) [?:?]
Caused by: org.apache.ignite.plugin.security.SecurityException: Operation is
not allowed [rsrcName=null, perm=ADMIN_CLUSTER_STATE, login=ise_server]
at
com.sbt.security.ignite.core.authorizer.SecurityAuthorizerImpl.authorize(SecurityAuthorizerImpl.java:64)
~[security-core-16.1.1.jar:16.1.1]
at
com.sbt.security.ignite.core.SecurityProcessorImpl.authorize(SecurityProcessorImpl.java:484)
~[security-core-16.1.1.jar:16.1.1]
... 12 more
2024-10-25 11:53:38.814 [ERROR][disco-notifier-worker-#67][] JVM will be halted
immediately due to the failure: [failureCtx=FailureContext
[type=SYSTEM_WORKER_TERMINATION, err=class
o.a.i.plugin.security.SecurityException: Authorization failed
[perm=ADMIN_CLUSTER_STATE, name=null, login=ise_server]]]
{code}
> Join node without proper permissions for changing cluster state lead to node
> failure
> ------------------------------------------------------------------------------------
>
> Key: IGNITE-23563
> URL: https://issues.apache.org/jira/browse/IGNITE-23563
> Project: Ignite
> Issue Type: Bug
> Affects Versions: 2.16
> Reporter: Ivan Daschinsky
> Assignee: Ivan Daschinsky
> Priority: Major
> Fix For: 2.17
>
>
> {code:java}
> 2024-10-25 11:53:38.804 [ERROR][disco-notifier-worker-#67][] Critical system
> error detected. Will be handled accordingly to configured handler
> [hnd=StopNodeOrHaltFailureHandler [tryStop=false, timeout=0,
> super=AbstractFailureHandler [ignoredFailureTypes=UnmodifiableSet
> [SYSTEM_WORKER_BLOCKED, SYSTEM_CRITICAL_OPERATION_TIMEOUT]]],
> failureCtx=FailureContext [type=SYSTEM_WORKER_TERMINATION, err=class
> o.a.i.plugin.security.SecurityException: Authorization failed
> [perm=ADMIN_CLUSTER_STATE, name=null, login=<some_login>]]]
> org.apache.ignite.plugin.security.SecurityException: Authorization failed
> [perm=ADMIN_CLUSTER_STATE, name=null, login=ise_server]
> at
> com.sbt.security.ignite.core.SecurityProcessorImpl.authorize(SecurityProcessorImpl.java:495)
>
> at
> org.apache.ignite.internal.processors.security.IgniteSecurityProcessor.authorize(IgniteSecurityProcessor.java:244)
> at
> org.apache.ignite.internal.processors.security.IgniteSecurity.authorize(IgniteSecurity.java:119)
>
> at
> org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.changeGlobalState(GridClusterStateProcessor.java:1111)
> at
> org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.changeGlobalState(GridClusterStateProcessor.java:1028)
>
> at
> org.apache.ignite.internal.processors.cluster.GridClusterStateProcessor.onLocalJoin(GridClusterStateProcessor.java:551)
> at
> org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3.onDiscovery0(GridDiscoveryManager.java:812)
>
> at
> org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3$NotificationTask.run(GridDiscoveryManager.java:977)
>
> at
> org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$3$SecurityAwareNotificationTask.run(GridDiscoveryManager.java:958)
>
> at
> org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$DiscoveryMessageNotifierWorker.body0(GridDiscoveryManager.java:2833)
> ~[ignite-core-16.1.1.jar:16.1.1]
> at
> org.apache.ignite.internal.managers.discovery.GridDiscoveryManager$DiscoveryMessageNotifierWorker.body(GridDiscoveryManager.java:2871)
> [ignite-core-16.1.1.jar:16.1.1]
> at
> org.apache.ignite.internal.util.worker.GridWorker.run(GridWorker.java:125)
> [ignite-core-16.1.1.jar:16.1.1]
> at java.base/java.lang.Thread.run(Thread.java:829) [?:?]
> Caused by: org.apache.ignite.plugin.security.SecurityException: Operation is
> not allowed [rsrcName=null, perm=ADMIN_CLUSTER_STATE, login=ise_server]
> at
> com.sbt.security.ignite.core.authorizer.SecurityAuthorizerImpl.authorize(SecurityAuthorizerImpl.java:64)
> ~[security-core-16.1.1.jar:16.1.1]
> at
> com.sbt.security.ignite.core.SecurityProcessorImpl.authorize(SecurityProcessorImpl.java:484)
> ~[security-core-16.1.1.jar:16.1.1]
> ... 12 more
> 2024-10-25 11:53:38.814 [ERROR][disco-notifier-worker-#67][] JVM will be
> halted immediately due to the failure: [failureCtx=FailureContext
> [type=SYSTEM_WORKER_TERMINATION, err=class
> o.a.i.plugin.security.SecurityException: Authorization failed
> [perm=ADMIN_CLUSTER_STATE, name=null, login=ise_server]]]
> {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
