13201614174 Qdfdhsgdgshagsydyffg As sfgswzv Fftdtf
发自我的 iPad > 在 佛历2557年1月1日，上午6:59，Manoj Samel <[email protected]> 写道： > > * Name node and secondary name nodes on different machines > * Kerberos was just enabled > * Cloudera CDH 4.5 on Centos > > Secondary name node log (HOST2) shows following > > > 2013-12-31 22:00:11,728 ERROR > org.apache.hadoop.security.UserGroupInformation: PriviledgedActionException > as:hdfs/<2NN-host>@<REALM> (auth:KERBEROS) > cause:org.apache.hadoop.hdfs.server.namenode.TransferFsImage$HttpGetFailedException: > Image transfer servlet at > http://NN-HOST:50070/getimage?getimage=1&txid=21309&storageInfo=-40:1404288132:0:CID-07c7bfbb-055d-41d8-8a8f-23a0e11a3235 > failed with status code 403 > Response message: > Only Namenode, Secondary Namenode, and administrators may access this servlet > > Name Node Log (HOST1) shows following > > 2013-12-31 21:59:56,173 INFO SecurityLogger.org.apache.hadoop.ipc.Server: > Auth successful for hdfs/2NN-host@REALM (auth:SIMPLE) > 2013-12-31 21:59:56,213 INFO > SecurityLogger.org.apache.hadoop.security.authorize.ServiceAuthorizationManager: > Authorization successful for hdfs/2NN-host@REALM (auth:KERBEROS) for > protocol=interface org.apache.hadoop.hdfs.server.protocol.NamenodeProtocol > > ... > 2013-12-31 21:59:56,612 INFO > org.apache.hadoop.hdfs.server.namenode.GetImageServlet: GetImageServlet > rejecting: hdfs/2NN-host@REALM > 2013-12-31 21:59:56,615 WARN > org.apache.hadoop.hdfs.server.namenode.GetImageServlet: Received > non-NN/SNN/administrator request for image or edits from hdfs/2NN-host@REALM > at 2NN-host-IP > > > -- > Thanks, > > Manoj
