Attila Doroszlai created HDDS-7529:
--------------------------------------
Summary: Secure SCM bootstrap fails if clusterID validation is
disabled
Key: HDDS-7529
URL: https://issues.apache.org/jira/browse/HDDS-7529
Project: Apache Ozone
Issue Type: Bug
Components: SCM HA
Affects Versions: 1.3.0
Reporter: Attila Doroszlai
Assignee: Attila Doroszlai
Secure SCM bootstrap fails if {{ozone.scm.skip.bootstrap.validation=true}}.
{code}
org.apache.hadoop.security.AccessControlException: Client cannot authenticate
via:[KERBEROS]
...
at
org.apache.hadoop.hdds.protocolPB.SCMSecurityProtocolClientSideTranslatorPB.getSCMCertChain(SCMSecurityProtocolClientSideTranslatorPB.java:222)
at
org.apache.hadoop.hdds.scm.ha.HASecurityUtils.getRootCASignedSCMCert(HASecurityUtils.java:150)
at
org.apache.hadoop.hdds.scm.ha.HASecurityUtils.initializeSecurity(HASecurityUtils.java:103)
at
org.apache.hadoop.hdds.scm.server.StorageContainerManager.initializeSecurityIfNeeded(StorageContainerManager.java:1157)
at
org.apache.hadoop.hdds.scm.server.StorageContainerManager.scmBootstrap(StorageContainerManager.java:1084)
at
org.apache.hadoop.hdds.scm.server.StorageContainerManagerStarter$SCMStarterHelper.bootStrap(StorageContainerManagerStarter.java:192)
at
org.apache.hadoop.hdds.scm.server.StorageContainerManagerStarter.bootStrapScm(StorageContainerManagerStarter.java:135)
{code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
