Vivek Ratnavel Subramanian created HDDS-5165:
------------------------------------------------
Summary: OM DB checkpoint servlet not accessible in a secure
cluster
Key: HDDS-5165
URL: https://issues.apache.org/jira/browse/HDDS-5165
Project: Apache Ozone
Issue Type: Bug
Components: OM
Affects Versions: 1.1.0
Reporter: Vivek Ratnavel Subramanian
Assignee: Vivek Ratnavel Subramanian
When security and ACL is enabled, but not spnego, the OMDBCheckpointServlet
throws an error:
{code:java}
10:02:29.094 PM ERROR OMDBCheckpointServlet
Permission denied: User principal 'dr.who' does not have access to
/dbCheckpoint.
This can happen when Ozone Manager is started with a different user.
Please append 'dr.who' to OM 'ozone.administrators' config and restart OM to
grant current user access to this endpoint.{code}
When Spnego is disabled, permissions cannot be checked since HTTP request will
not have an identity (kerberos principal) which is causing this error.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
