[
https://issues.apache.org/jira/browse/ACCUMULO-1060?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13576226#comment-13576226
]
John Vines commented on ACCUMULO-1060:
--------------------------------------
Got it, there's a token serialization mismatch. Between the refactoring and
keeping deprecated methods, there were a few cases throughout the code where
the serialized bytes of a SecurityToken were extracted from a Credential and
resupplied to a getConnector method. These bytes were then treated as a
password, resulting in a mismatch. CredentialHelper.extractToken(Credential)
will reassemble a SecurityToken give the canonical class name and serialized
version of it. This code is used in the server as well, but only after the
token class has been verified as valid by the authenticator.
> gc is getting an authentication error
> -------------------------------------
>
> Key: ACCUMULO-1060
> URL: https://issues.apache.org/jira/browse/ACCUMULO-1060
> Project: Accumulo
> Issue Type: Bug
> Components: gc
> Reporter: Eric Newton
> Assignee: John Vines
> Priority: Blocker
> Fix For: 1.5.0
>
>
> Just started seeing this. TServers/monitor have no problems authenticating.
> {noformat}
> Unable to scan metadata table
> java.lang.RuntimeException:
> org.apache.accumulo.core.client.AccumuloSecurityException: Error
> BAD_CREDENTIALS for user !SYSTEM - Username or Password is Invalid
> at
> org.apache.accumulo.core.client.impl.ScannerIterator.hasNext(ScannerIterator.java:174)
> at
> org.apache.accumulo.server.util.MetadataTable$LogEntryIterator.hasNext(MetadataTable.java:930)
> at
> org.apache.accumulo.server.gc.GarbageCollectWriteAheadLogs.removeMetadataEntries(GarbageCollectWriteAheadLogs.java:174)
> at
> org.apache.accumulo.server.gc.GarbageCollectWriteAheadLogs.collect(GarbageCollectWriteAheadLogs.java:82)
> at
> org.apache.accumulo.server.gc.SimpleGarbageCollector.run(SimpleGarbageCollector.java:302)
> at
> org.apache.accumulo.server.gc.SimpleGarbageCollector.main(SimpleGarbageCollector.java:162)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
> at java.lang.reflect.Method.invoke(Method.java:597)
> at org.apache.accumulo.start.Main$1.run(Main.java:97)
> at java.lang.Thread.run(Thread.java:662)
> Caused by: org.apache.accumulo.core.client.AccumuloSecurityException:
> Error BAD_CREDENTIALS for user !SYSTEM - Username or Password is Invalid
> at
> org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:474)
> at
> org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:298)
> at
> org.apache.accumulo.core.client.impl.ScannerIterator$Reader.run(ScannerIterator.java:82)
> at
> org.apache.accumulo.core.client.impl.ScannerIterator.hasNext(ScannerIterator.java:164)
> ... 11 more
> Caused by: ThriftSecurityException(user:!SYSTEM, code:BAD_CREDENTIALS)
> at
> org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result$startScan_resultStandardScheme.read(TabletClientService.java:4652)
> at
> org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result$startScan_resultStandardScheme.read(TabletClientService.java:4629)
> at
> org.apache.accumulo.core.tabletserver.thrift.TabletClientService$startScan_result.read(TabletClientService.java:4552)
> at
> org.apache.thrift.TServiceClient.receiveBase(TServiceClient.java:78)
> at
> org.apache.accumulo.core.tabletserver.thrift.TabletClientService$Client.recv_startScan(TabletClientService.java:209)
> at
> org.apache.accumulo.core.tabletserver.thrift.TabletClientService$Client.startScan(TabletClientService.java:186)
> at
> org.apache.accumulo.core.client.impl.ThriftScanner.scan(ThriftScanner.java:419)
> ... 14 more
> {noformat}
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
