I recently worked on HBASE-16773 where 20 PriorityRpcServer handlers were all occupied accessing acl table.
Can you take a few jstack of the server hosting acl table when acl command was executing ? Pastebin one or two stack trace. Please also check server log where acl table is hosted. Thanks On Tue, Oct 11, 2016 at 12:14 AM, mathes waran <[email protected]> wrote: > Hi , > > I have configured HBase-1.1.3 and Hadoop-2.7.2 with Kerberos security. > > I have enabled authorization for HBase. > > When executing any authorization command like user_permission, grant, > revoke, > etc. > > Its getting more than 30 seconds to display the result. > > Below are hbase-site.xml configuration properties > > <property> > <name>hbase.master</name> > <value>IP:60000</value> > </property> > <property> > <name>hbase.rootdir</name> > <value>hdfs://IP:9000/HBase</value> > </property> > <property> > <name>hbase.cluster.distributed</name> > <value>true</value> > </property> > <property> > <name>hbase.zookeeper.quorum</name> > <value>IP1:2181,IP2:2181,IP3:2181</value> > </property> > <property> > <name>hbase.master.port</name> > <value>60000</value> > </property> > <property> > <name>hbase.master.info.port</name> > <value>60010</value> > </property> > <property> > <name>hbase.regionserver.port</name> > <value>60020</value> > </property> > <property> > <name>hbase.regionserver.info.port</name> > <value>60030</value> > </property> > <property> > <name>hbase.security.authentication</name> > <value>KERBEROS</value> > </property> > <property> > <name>hbase.master.keytab.file</name> > <value>masterkeytab</value> > </property> > <property> > <name>hbase.regionserver.keytab.file</name> > <value>regionserverkeytab</value> > </property> > <property> > <name>hbase.master.kerberos.principal</name> > <value>masterprincipal</value> > </property> > <property> > <name>hbase.regionserver.kerberos.principal</name> > <value>regionserverprincipal</value> > </property> > <property> > <name>hbase.rpc.engine</name> > <value>org.apache.hadoop.hbase.ipc.SecureRpcEngine</value> > </property> > <property> > <name>hbase.ssl.enabled</name> > <value>true</value> > </property> > <property> > <name>hbase.superuser</name> > <value>@HadoopUser</value> > </property> > <property> > <name>hbase.security.authorization</name> > <value>true</value> > </property> > <property> > <name>hbase.coprocessor.master.classes</name> > <value>org.apache.hadoop.hbase.security.access. > AccessController</value> > </property> > <property> > <name>hbase.coprocessor.region.classes</name> > <value>org.apache.hadoop.hbase.security.token. > TokenProvider,org.apache.hadoop.hbase.security.access. > AccessController</value> > </property> > > Help me to improve performance on HBase acl. > > Thanks, > > Matheswaran.S >
