Henry Robinson has posted comments on this change.

Change subject: IMPALA-4978 / IMPALA-5631: [DOCS] Add FQDN known issue
......................................................................


Patch Set 2:

(1 comment)

After some discussion, I think two issues are being conflated here.

1. If a complete KRB principal is not supplied via --principal, Impala tries to 
guess at the hostname part using gethostname(). This might not return the FQDN 
which is needed for Kerberos. The linked bug (IMPALA-4978) is really talking 
about this issue.

2. However, the more important issue is that IMPALA-5253 made it critical that 
for TLS-enabled deployments, every service thinks its hostname is the FQDN. 
That hostname is controlled by --hostname. If that is not set, Impala falls 
back to gethostname() - and this is where IMPALA-4978 comes in, because it 
should also use the getaddrinfo() call first. The workaround for this issue is 
to set --hostname correctly to the FQDN (or ensure that 'hostname' returns the 
FQDN by configuring name resolution correctly). We found this at Cloudera 
because in some situations our cluster management software would set --hostname 
to the shortname.

http://gerrit.cloudera.org:8080/#/c/7388/2/docs/topics/impala_known_issues.xml
File docs/topics/impala_known_issues.xml:

PS2, Line 156: This problem might occur immediately after an upgrade, due to 
changes in cluster
             :           management software that supplies the 
<codeph>--hostname</codeph> flag
             :           automatically to the Impala-related daemons.
It's a bit hard to understand *what* kind of changes would cause this, and 
without that knowledge this is a bit vague. In my opinion it makes sense to 
either link directly to the CM known issue (I think it's perfectly ok to point 
to third-party software that breaks Impala during upgrades), or to remove this 
entirely.


-- 
To view, visit http://gerrit.cloudera.org:8080/7388
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ib039d0102878f1c05470371f581cb258287b9bc0
Gerrit-PatchSet: 2
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-Owner: John Russell <[email protected]>
Gerrit-Reviewer: Henry Robinson <[email protected]>
Gerrit-Reviewer: John Russell <[email protected]>
Gerrit-Reviewer: Lars Volker <[email protected]>
Gerrit-HasComments: Yes

Reply via email to