[ 
https://issues.apache.org/jira/browse/IMPALA-12011?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Quanlong Huang resolved IMPALA-12011.
-------------------------------------
     Fix Version/s: Impala 4.3.0
    Target Version: Impala 4.1.3
        Resolution: Fixed

> Shell command of webserver_private_key_password_cmd doesn't unset 
> JAVA_TOOL_OPTIONS variable
> --------------------------------------------------------------------------------------------
>
>                 Key: IMPALA-12011
>                 URL: https://issues.apache.org/jira/browse/IMPALA-12011
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Backend
>            Reporter: Quanlong Huang
>            Assignee: Quanlong Huang
>            Priority: Critical
>             Fix For: Impala 4.3.0
>
>
> I'm using IntelliJ to attach to a catalog server in a secured cluster 
> (Kerberos+SSL), I set JAVA_TOOL_OPTIONS to
> {code:java}
> -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=30020{code}
> However, catalogd fails to start since the java process launched by the 
> webserver_private_key_password_cmd also inherits this env variable. Hence 
> failed to bind the port of 30020 which is already used by catalogd.
> {code:java}
> ERROR: transport error 202: bind failed: Address already in use
> ERROR: JDWP Transport dt_socket failed to initialize, TRANSPORT_INIT(510)
> JDWP exit error AGENT_ERROR_TRANSPORT_INIT(197): No transports initialized 
> [debugInit.c:750]
> F0321 06:23:42.424225 577816 catalogd-main.cc:70] SSL private-key password 
> command 
> ('/var/run/cloudera-scm-agent/process/63-impala-CATALOGSERVER/altscript.sh 
> sec-0-webserver_private_key_password_cmd') failed with error: Shell cmd: 
> '/var/run/cloudera-scm-agent/process/63-impala-CATALOGSERVER/altscript.sh 
> sec-0-webserver_private_key_password_cmd' exited with error status: '2'. 
> Stdout was: ''
> . Impalad exiting.
> *** Check failure stack trace: ***
>     @          0x2e3d5ec
>     @          0x2e3eedc
>     @          0x2e3cf4a
>     @          0x2e40b48
>     @           0xbdfec7
>     @           0xb54a07
>     @     0x7feabb01d444
>     @           0xbdeb96
> Picked up JAVA_TOOL_OPTIONS: 
> -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=30020 {code}
> IMPALA-6293 is supposed to address this issue. But the patch of it has a 
> mistack in 
> be/src/util/webserver.cc: 
> https://gerrit.cloudera.org/c/12005/7/be/src/util/webserver.cc
> {code:cpp}
> const string& password_cmd = FLAGS_webserver_private_key_password_cmd;
> if (!password_cmd.empty()) {
>   if (!RunShellProcess(password_cmd, &key_password, true)) {
>     return Status(TErrorCode::SSL_PASSWORD_CMD_FAILED, password_cmd, 
> key_password,
>         {"JAVA_TOOL_OPTIONS"});  // The last argument should be added to the 
> above RunShellProcess() call
>   }{code}
> Thus the shell command of webserver_private_key_password_cmd doesn't unset 
> the JAVA_TOOL_OPTIONS env variable.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to