[ 
https://issues.apache.org/jira/browse/STORM-2612?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

MichealShin updated STORM-2612:
-------------------------------
    Description: 
when use the StormSubmitter.submitTopologyAs api to impersonate another user , 
the supervisor crashes.
I used the user "nimbus" to start the supervisor, then I submit a topology as 
"Micheal", then I got this:
{color:red}2017-07-03 17:47:11.340 o.a.s.u.Utils [ERROR] An exception happened 
while downloading 
/home/Micheal/apache-storm-1.0.0/data/supervisor/tmp/5331e7d8-eb6f-403d-a2c5-45cecde9ca25/stormjar.jar
 from blob store.
AuthorizationException(msg:[nimbus] does not have [READ ] access to 
topo3-8-1499073314-stormjar.jar)
        at 
org.apache.storm.generated.Nimbus$beginBlobDownload_result$beginBlobDownload_resultStandardScheme.read(Nimbus.java:25754)
        at 
org.apache.storm.generated.Nimbus$beginBlobDownload_result$beginBlobDownload_resultStandardScheme.read(Nimbus.java:25731)
        at 
org.apache.storm.generated.Nimbus$beginBlobDownload_result.read(Nimbus.java:25662)
        at 
org.apache.storm.thrift.TServiceClient.receiveBase(TServiceClient.java:86)
        at 
org.apache.storm.generated.Nimbus$Client.recv_beginBlobDownload(Nimbus.java:825)
        at 
org.apache.storm.generated.Nimbus$Client.beginBlobDownload(Nimbus.java:812)
        at 
org.apache.storm.blobstore.NimbusBlobStore.getBlob(NimbusBlobStore.java:357)
        at 
org.apache.storm.utils.Utils.downloadResourcesAsSupervisorAttempt(Utils.java:516)
        at 
org.apache.storm.utils.Utils.downloadResourcesAsSupervisor(Utils.java:497)
        at 
org.apache.storm.daemon.supervisor$fn__9590.invoke(supervisor.clj:948)
        at clojure.lang.MultiFn.invoke(MultiFn.java:243)
        at 
org.apache.storm.daemon.supervisor$mk_synchronize_supervisor$this__9351$fn__9369.invoke(supervisor.clj:582)
        at 
org.apache.storm.daemon.supervisor$mk_synchronize_supervisor$this__9351.invoke(supervisor.clj:581)
        at org.apache.storm.event$event_manager$fn__8903.invoke(event.clj:40)
        at clojure.lang.AFn.run(AFn.java:22)
        at java.lang.Thread.run(Thread.java:745)
{color}
I wonder if there is some parameter I can set to make this work.
Thanks in advance.

  was:
when use the StormSubmitter.submitTopologyAs api to impersonate another user , 
the supervisor crashes.
I used the user "nimbus" to start the supervisor, then I submit a topology as 
"Micheal", then I got this:
{color:red}2017-07-03 17:47:11.340 o.a.s.u.Utils [ERROR] An exception happened 
while downloading 
/home/Micheal/apache-storm-1.0.0/data/supervisor/tmp/5331e7d8-eb6f-403d-a2c5-45cecde9ca25/stormjar.jar
 from blob store.
AuthorizationException(msg:[nimbus] does not have [READ ] access to 
topo3-8-1499073314-stormjar.jar)
        at 
org.apache.storm.generated.Nimbus$beginBlobDownload_result$beginBlobDownload_resultStandardScheme.read(Nimbus.java:25754)
        at 
org.apache.storm.generated.Nimbus$beginBlobDownload_result$beginBlobDownload_resultStandardScheme.read(Nimbus.java:25731)
        at 
org.apache.storm.generated.Nimbus$beginBlobDownload_result.read(Nimbus.java:25662)
        at 
org.apache.storm.thrift.TServiceClient.receiveBase(TServiceClient.java:86)
        at 
org.apache.storm.generated.Nimbus$Client.recv_beginBlobDownload(Nimbus.java:825)
        at 
org.apache.storm.generated.Nimbus$Client.beginBlobDownload(Nimbus.java:812)
        at 
org.apache.storm.blobstore.NimbusBlobStore.getBlob(NimbusBlobStore.java:357)
        at 
org.apache.storm.utils.Utils.downloadResourcesAsSupervisorAttempt(Utils.java:516)
        at 
org.apache.storm.utils.Utils.downloadResourcesAsSupervisor(Utils.java:497)
        at 
org.apache.storm.daemon.supervisor$fn__9590.invoke(supervisor.clj:948)
        at clojure.lang.MultiFn.invoke(MultiFn.java:243)
        at 
org.apache.storm.daemon.supervisor$mk_synchronize_supervisor$this__9351$fn__9369.invoke(supervisor.clj:582)
        at 
org.apache.storm.daemon.supervisor$mk_synchronize_supervisor$this__9351.invoke(supervisor.clj:581)
        at org.apache.storm.event$event_manager$fn__8903.invoke(event.clj:40)
        at clojure.lang.AFn.run(AFn.java:22)
        at java.lang.Thread.run(Thread.java:745)
{color}
Thanks in advance.


> Supervisor crashes when use the StormSubmitter.submitTopologyAs api to submit 
> another user's topology.
> ------------------------------------------------------------------------------------------------------
>
>                 Key: STORM-2612
>                 URL: https://issues.apache.org/jira/browse/STORM-2612
>             Project: Apache Storm
>          Issue Type: Question
>    Affects Versions: 1.0.0
>            Reporter: MichealShin
>
> when use the StormSubmitter.submitTopologyAs api to impersonate another user 
> , the supervisor crashes.
> I used the user "nimbus" to start the supervisor, then I submit a topology as 
> "Micheal", then I got this:
> {color:red}2017-07-03 17:47:11.340 o.a.s.u.Utils [ERROR] An exception 
> happened while downloading 
> /home/Micheal/apache-storm-1.0.0/data/supervisor/tmp/5331e7d8-eb6f-403d-a2c5-45cecde9ca25/stormjar.jar
>  from blob store.
> AuthorizationException(msg:[nimbus] does not have [READ ] access to 
> topo3-8-1499073314-stormjar.jar)
>       at 
> org.apache.storm.generated.Nimbus$beginBlobDownload_result$beginBlobDownload_resultStandardScheme.read(Nimbus.java:25754)
>       at 
> org.apache.storm.generated.Nimbus$beginBlobDownload_result$beginBlobDownload_resultStandardScheme.read(Nimbus.java:25731)
>       at 
> org.apache.storm.generated.Nimbus$beginBlobDownload_result.read(Nimbus.java:25662)
>       at 
> org.apache.storm.thrift.TServiceClient.receiveBase(TServiceClient.java:86)
>       at 
> org.apache.storm.generated.Nimbus$Client.recv_beginBlobDownload(Nimbus.java:825)
>       at 
> org.apache.storm.generated.Nimbus$Client.beginBlobDownload(Nimbus.java:812)
>       at 
> org.apache.storm.blobstore.NimbusBlobStore.getBlob(NimbusBlobStore.java:357)
>       at 
> org.apache.storm.utils.Utils.downloadResourcesAsSupervisorAttempt(Utils.java:516)
>       at 
> org.apache.storm.utils.Utils.downloadResourcesAsSupervisor(Utils.java:497)
>       at 
> org.apache.storm.daemon.supervisor$fn__9590.invoke(supervisor.clj:948)
>       at clojure.lang.MultiFn.invoke(MultiFn.java:243)
>       at 
> org.apache.storm.daemon.supervisor$mk_synchronize_supervisor$this__9351$fn__9369.invoke(supervisor.clj:582)
>       at 
> org.apache.storm.daemon.supervisor$mk_synchronize_supervisor$this__9351.invoke(supervisor.clj:581)
>       at org.apache.storm.event$event_manager$fn__8903.invoke(event.clj:40)
>       at clojure.lang.AFn.run(AFn.java:22)
>       at java.lang.Thread.run(Thread.java:745)
> {color}
> I wonder if there is some parameter I can set to make this work.
> Thanks in advance.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to