[
https://issues.apache.org/jira/browse/HDDS-13915?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sammi Chen updated HDDS-13915:
------------------------------
Description:
Recently, we see follow failure in SCM startup due to there is an extra space
used in ozone.administrators configuration
{code:java}
Error during updating CA list
org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException):
User scm/[email protected] (auth:KERBEROS) is not authorized for
protocol interface
org.apache.hadoop.hdds.protocol.SCMSecurityProtocol: denied by configured ACL
{code}
!image-2025-11-12-13-52-20-881.png!
It's better to make the property value parse more tolerance, tolerate extra
space before and behind each value seperated by ",".
This idea applies to all properties, which support to accept a list of values.
was:
Recently, we see follow failure in SCM startup due to there is an extra space
used in ozone.administrators configuration
{code:java}
Error during updating CA list
org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException):
User scm/[email protected] (auth:KERBEROS) is not authorized for
protocol interface
org.apache.hadoop.hdds.protocol.SCMSecurityProtocol: denied by configured ACL
{code}
!image-2025-11-12-13-52-20-881.png!
It's better to make the property value parse more robust, tolerate extra space
before and behind each value seperated by ",".
This idea applies to all properties, which support to accept a list of values.
> Improve ozone administrator property value tolerance
> ----------------------------------------------------
>
> Key: HDDS-13915
> URL: https://issues.apache.org/jira/browse/HDDS-13915
> Project: Apache Ozone
> Issue Type: Improvement
> Reporter: Sammi Chen
> Priority: Major
> Attachments: image-2025-11-12-13-52-20-881.png
>
>
> Recently, we see follow failure in SCM startup due to there is an extra space
> used in ozone.administrators configuration
> {code:java}
> Error during updating CA list
> org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security.authorize.AuthorizationException):
> User scm/[email protected] (auth:KERBEROS) is not authorized
> for protocol interface
> org.apache.hadoop.hdds.protocol.SCMSecurityProtocol: denied by configured ACL
> {code}
> !image-2025-11-12-13-52-20-881.png!
> It's better to make the property value parse more tolerance, tolerate extra
> space before and behind each value seperated by ",".
> This idea applies to all properties, which support to accept a list of
> values.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
