I recently worked on HBASE-16773 where 20 PriorityRpcServer handlers were
all occupied accessing acl table.
Can you take a few jstack of the server hosting acl table when acl command
was executing ?
Pastebin one or two stack trace.
Please also check server log where acl table is hosted.
Thanks
Hi ,
I have configured HBase-1.1.3 and Hadoop-2.7.2 with Kerberos security.
I have enabled authorization for HBase.
When executing any authorization command like user_permission, grant, revoke,
etc.
Its getting more than 30 seconds to display the result.
Below are hbase-site.xml configuration
; > > > > > hbase.master
>> > > > > > > > IP:6
>> > > > > > > >
>> > > > > > > >
>> > > > > > > > hbase.rootdir
>> > > > > > > >
t; >
> > > > > > > >
> > > > > > > > hbase.zookeeper.quorum
> > > > > > > > IP1:2181,IP2:2181,IP3:2181
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.master.port
> > > > > > > > 6
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.master.info.port
> > > > > > > > 60010
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.regionserver.port
> > > > > > > > 60020
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.regionserver.info.port
> > > > > > > > 60030
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.security.authentication
> > > > > > > > KERBEROS
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.master.keytab.file
> > > > > > > > masterkeytab
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.regionserver.keytab.file
> > > > > > > > regionserverkeytab
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.master.kerberos.principal
> > > > > > > > masterprincipal
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.regionserver.kerberos.principal
> > > > > > > > regionserverprincipal
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.rpc.engine
> > > > > > > >
> org.apache.hadoop.hbase.ipc.SecureRpcEngine
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.ssl.enabled
> > > > > > > > true
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.superuser
> > > > > > > > @HadoopUser
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.security.authorization
> > > > > > > > true
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.coprocessor.master.classes
> > > > > > > >
> > > > > > >
> > > > >
> > org.apache.hadoop.hbase.security.access.AccessController
> > > > > > > >
> > > > > > > >
> > > > > > > > hbase.coprocessor.region.classes
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
> org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
> > > > > > > >
> > > > > > > >
> > > > > > > > Find my stack overflow question here
> > > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
> http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
> > > > > > > >
> > > > > > > > Thanks,
> > > > > > > >
> > > > > > > > Kumar
> > > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
>
gt; > > > > hbase.zookeeper.quorum
> > > > > > > IP1:2181,IP2:2181,IP3:2181
> > > > > > >
> > > > > > >
> > > > > > > hbase.master.port
> > > > > > > 6
> > > > > > >
> > > > > > >
> > > > > >
gt; > > hbase.regionserver.port
> > > > > > 60020
> > > > > >
> > > > > >
> > > > > > hbase.regionserver.info.port
> > > > > > 60030
> > > > > >
> > > > > >
> > > > > > hbase.security.authentication
> > > > > > KERBEROS
> > > > > >
> > > > > >
> > > > > > hbase.master.keytab.file
> > > > > > masterkeytab
> > > > > >
> > > > > >
> > > > > > hbase.regionserver.keytab.file
> > > > > > regionserverkeytab
> > > > > >
> > > > > >
> > > > > > hbase.master.kerberos.principal
> > > > > > masterprincipal
> > > > > >
> > > > > >
> > > > > > hbase.regionserver.kerberos.principal
> > > > > > regionserverprincipal
> > > > > >
> > > > > >
> > > > > > hbase.rpc.engine
> > > > > > org.apache.hadoop.hbase.ipc.SecureRpcEngine
> > > > > >
> > > > > >
> > > > > > hbase.ssl.enabled
> > > > > > true
> > > > > >
> > > > > >
> > > > > > hbase.superuser
> > > > > > @HadoopUser
> > > > > >
> > > > > >
> > > > > > hbase.security.authorization
> > > > > > true
> > > > > >
> > > > > >
> > > > > > hbase.coprocessor.master.classes
> > > > > >
> > > > >
> > > org.apache.hadoop.hbase.security.access.AccessController
> > > > > >
> > > > > >
> > > > > > hbase.coprocessor.region.classes
> > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
> org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
> > > > > >
> > > > > >
> > > > > > Find my stack overflow question here
> > > > > >
> > > > >
> > > >
> > >
> >
> http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
> > > > > >
> > > > > > Thanks,
> > > > > >
> > > > > > Kumar
> > > > > >
> > > > >
> > > >
> > >
> >
>
y.authentication
> > > > > KERBEROS
> > > > >
> > > > >
> > > > > hbase.master.keytab.file
> > > > > masterkeytab
> > > > >
> > > > >
> > > > > hbase.regionserver.keytab.file
> > > > > regionserverkeytab
> > > > >
> > > > >
> > > > > hbase.master.kerberos.principal
> > > > > masterprincipal
> > > > >
> > > > >
> > > > > hbase.regionserver.kerberos.principal
> > > > > regionserverprincipal
> > > > >
> > > > >
> > > > > hbase.rpc.engine
> > > > > org.apache.hadoop.hbase.ipc.SecureRpcEngine
> > > > >
> > > > >
> > > > > hbase.ssl.enabled
> > > > > true
> > > > >
> > > > >
> > > > > hbase.superuser
> > > > > @HadoopUser
> > > > >
> > > > >
> > > > > hbase.security.authorization
> > > > > true
> > > > >
> > > > >
> > > > > hbase.coprocessor.master.classes
> > > > >
> > > >
> > org.apache.hadoop.hbase.security.access.AccessController
> > > > >
> > > > >
> > > > > hbase.coprocessor.region.classes
> > > > >
> > > > >
> > > >
> > >
> >
> org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
> > > > >
> > > > >
> > > > > Find my stack overflow question here
> > > > >
> > > >
> > >
> >
> http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
> > > > >
> > > > > Thanks,
> > > > >
> > > > > Kumar
> > > > >
> > > >
> > >
> >
>
ytab.file
> > > > regionserverkeytab
> > > >
> > > >
> > > > hbase.master.kerberos.principal
> > > > masterprincipal
> > > >
> > > >
> > > > hbase.regionserver.kerberos.principal
> > > > regionserverprincipal
> > > >
> > > >
> > > > hbase.rpc.engine
> > > > org.apache.hadoop.hbase.ipc.SecureRpcEngine
> > > >
> > > >
> > > > hbase.ssl.enabled
> > > > true
> > > >
> > > >
> > > > hbase.superuser
> > > > @HadoopUser
> > > >
> > > >
> > > > hbase.security.authorization
> > > > true
> > > >
> > > >
> > > > hbase.coprocessor.master.classes
> > > >
> > >
> org.apache.hadoop.hbase.security.access.AccessController
> > > >
> > > >
> > > > hbase.coprocessor.region.classes
> > > >
> > > >
> > >
> >
> org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
> > > >
> > > >
> > > > Find my stack overflow question here
> > > >
> > >
> >
> http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
> > > >
> > > > Thanks,
> > > >
> > > > Kumar
> > > >
> > >
> >
>
t; > >
> > > hbase.regionserver.kerberos.principal
> > > regionserverprincipal
> > >
> > >
> > > hbase.rpc.engine
> > > org.apache.hadoop.hbase.ipc.SecureRpcEngine
> > >
> > >
> > > hbase.ssl.enabled
> > > true
> > >
> > >
> > > hbase.superuser
> > > @HadoopUser
> > >
> > >
> > > hbase.security.authorization
> > > true
> > >
> > >
> > > hbase.coprocessor.master.classes
> > >
> > org.apache.hadoop.hbase.security.access.AccessController
> > >
> > >
> > > hbase.coprocessor.region.classes
> > >
> > >
> >
> org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
> > >
> > >
> > > Find my stack overflow question here
> > >
> >
> http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
> > >
> > > Thanks,
> > >
> > > Kumar
> > >
> >
>
ipc.SecureRpcEngine
> >
> >
> > hbase.ssl.enabled
> > true
> >
> >
> > hbase.superuser
> > @HadoopUser
> >
> >
> > hbase.security.authorization
> > true
> >
> >
> > hbase.coprocessor.master.classes
> >
> org.apache.hadoop.hbase.security.access.AccessController
> >
> >
> > hbase.coprocessor.region.classes
> >
> >
> org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
> >
> >
> > Find my stack overflow question here
> >
> http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
> >
> > Thanks,
> >
> > Kumar
> >
>
t; hbase.coprocessor.master.classes
> org.apache.hadoop.hbase.security.access.AccessController
>
>
> hbase.coprocessor.region.classes
>
> org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
>
>
> Find my stack overflow question here
> http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
>
> Thanks,
>
> Kumar
>
org.apache.hadoop.hbase.security.access.AccessController
hbase.coprocessor.region.classes
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.AccessController
Find my stack overflow question here
http://stackoverflow.com/questions/37782043/hbase-acl-commands-are-too-slow
Thanks,
Kumar
12 matches
Mail list logo