Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-22819

Issues with storm jaas files and recursive ch_(mod/own) calls

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.5.1
    • None
    • security

    Description

      Post disabling the kerberos Ambari is not deleting the storm_jaas.conf and client_jaas.conf files from storm conf directory.

      Offset lag section in Storm UI is not populating because of the jaas conf.

      Unable to get offset lags for kafka. Reason: org.apache.zookeeper.KeeperException$AuthFailedException: KeeperErrorCode = AuthFailed for /brokers/topics/hortonworks/partitions at org.apache.zookeeper.KeeperException.create(KeeperException.java:123) at org.apache.zookeeper.KeeperException.create(KeeperException.java:51) at org.apache.zookeeper.ZooKeeper.getChildren(ZooKeeper.java:1590) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:230) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl$3.call(GetChildrenBuilderImpl.java:219) at org.apache.curator.shaded.RetryLoop.callWithRetry(RetryLoop.java:109) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.pathInForeground(GetChildrenBuilderImpl.java:216) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:207) at org.apache.curator.shaded.framework.imps.GetChildrenBuilderImpl.forPath(GetChildrenBuilderImpl.java:40) at org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getLeadersAndTopicPartitions(KafkaOffsetLagUtil.java:323) at org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.getOffsetLags(KafkaOffsetLagUtil.java:257) at org.apache.storm.kafka.monitor.KafkaOffsetLagUtil.main(KafkaOffsetLagUtil.java:126)
      
      

      Storm's /usr/hdp/current/storm-client/bin/storm-kafka-monitor checks if the storm_jaas.conf exists in storm configuration directory and then uses it.

      STORM_JAAS_CONF_PARAM=""
      JAAS_FILE="${STORM_CONF_DIR}/storm_jaas.conf"
      if [ -f $JAAS_FILE ]; then
       STORM_JAAS_CONF_PARAM="-Djava.security.auth.login.config=${JAAS_FILE}"
      fi
      

      Issue will be resolved if we delete the storm_jaas.conf file manually.

      As well storm jaas configs must be readable by world to allow some mpacks work properly.

      Attachments

        Activity

          People

            echekanskiy Eugene Chekanskiy
            Sandeep Nemuri Sandeep Nemuri
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 1h
                1h