Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-4 Implement security for Hadoop Distributed Storage Layer
  3. HDDS-1190

Fix jdk 11 issue for ozonesecure base image and docker-compose

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • None
    • None
    • None
    • HDDS BadLands

    Description

      HDDS-1019 changes to use hadoop-runner as base image for ozonesecure docker-compose. There are a few issues that need to fixed.

       

      1.The hadoop-runner uses jdk11 but the ozonesecure/docker-config assume openjdk8 for JAVA_HOME. 

       

      2. The KEYTAB_DIR needs to be quoted with '.

       

      3. keytab based login failed with Message stream modified (41), elek mentioned in HDDS-1019 that we need to add max_renewable_life to "docker-image/docker-krb5/krb5.conf" like follows.
      [realms]
      EXAMPLE.COM = {
      kdc = localhost
      admin_server = localhost
      max_renewable_life = 7d
      }
      Failures:

      
       org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: scm/scm@EXAMPLE.COM from keytab /etc/security/keytabs/scm.keytab javax.security.auth.login.LoginException: Message stream modified (41)
      
      scm_1           | at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
      
      scm_1           |
      
      

      Attachments

        1. HDDS-1190-docker-hadoop-runner.001.patch
          0.3 kB
          Xiaoyu Yao
        2. HDDS-1190-trunk.001.patch
          1 kB
          Xiaoyu Yao

        Issue Links

          Activity

            People

              xyao Xiaoyu Yao
              xyao Xiaoyu Yao
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: