Uploaded image for project: 'Slider'
  1. Slider
  2. SLIDER-888

intermittent errors when accessing key store password during localization of cert stores

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • None
    • appmaster, security
    • None

    Description

      Under certain conditions exceptions are generated during localization of certificate stores to containers:

      2015-05-18 20:35:38,533 [RoleLaunchService-010] ERROR appmaster.RoleLaunchService - Exception thrown while trying to start ACCUMULO_MONITOR: java.util.NoSuchElementException
      java.util.NoSuchElementException
      at sun.misc.CompoundEnumeration.nextElement(CompoundEnumeration.java:59)
      at java.util.ServiceLoader$LazyIterator.hasNext(ServiceLoader.java:349)
      at java.util.ServiceLoader$1.hasNext(ServiceLoader.java:439)
      at org.apache.hadoop.security.alias.CredentialProviderFactory.getProviders(CredentialProviderFactory.java:57)
      at org.apache.hadoop.conf.Configuration.getPasswordFromCredentialProviders(Configuration.java:1946)
      at org.apache.hadoop.conf.Configuration.getPassword(Configuration.java:1926)
      at org.apache.slider.server.services.security.AbstractSecurityStoreGenerator.getStorePassword(AbstractSecurityStoreGenerator.java:64)
      at org.apache.slider.server.services.security.KeystoreGenerator.generate(KeystoreGenerator.java:43)
      at org.apache.slider.server.services.security.StoresGenerator.generateSecurityStores(StoresGenerator.java:48)
      at org.apache.slider.providers.agent.AgentProviderService.generateSecurityStores(AgentProviderService.java:561)
      at org.apache.slider.providers.agent.AgentProviderService.localizeContainerSecurityStores(AgentProviderService.java:545)
      at org.apache.slider.providers.agent.AgentProviderService.buildContainerLaunchContext(AgentProviderService.java:453)
      at org.apache.slider.server.appmaster.RoleLaunchService$RoleLauncher.run(RoleLaunchService.java:201)
      at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
      at java.lang.Thread.run(Thread.java:745)

      and

      2015-05-18 20:28:42,393 [RoleLaunchService-008] ERROR appmaster.RoleLaunchService - Exception thrown while trying to start ACCUMULO_TSERVER: java.io.IOException: Configuration problem with provider path.
      java.io.IOException: Configuration problem with provider path.
      at org.apache.hadoop.conf.Configuration.getPasswordFromCredentialProviders(Configuration.java:1966)
      at org.apache.hadoop.conf.Configuration.getPassword(Configuration.java:1926)
      at org.apache.slider.server.services.security.AbstractSecurityStoreGenerator.getStorePassword(AbstractSecurityStoreGenerator.java:64)
      at org.apache.slider.server.services.security.KeystoreGenerator.generate(KeystoreGenerator.java:43)
      at org.apache.slider.server.services.security.StoresGenerator.generateSecurityStores(StoresGenerator.java:48)
      at org.apache.slider.providers.agent.AgentProviderService.generateSecurityStores(AgentProviderService.java:561)
      at org.apache.slider.providers.agent.AgentProviderService.localizeContainerSecurityStores(AgentProviderService.java:545)
      at org.apache.slider.providers.agent.AgentProviderService.buildContainerLaunchContext(AgentProviderService.java:453)
      at org.apache.slider.server.appmaster.RoleLaunchService$RoleLauncher.run(RoleLaunchService.java:201)
      at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
      at java.lang.Thread.run(Thread.java:745)
      Caused by: java.io.IOException: No CredentialProviderFactory for jceks://hdfs/user/hrt_qa/accumulo-test_read_write_ssl.jceks in hadoop.security.credential.provider.path
      at org.apache.hadoop.security.alias.CredentialProviderFactory.getProviders(CredentialProviderFactory.java:66)
      at org.apache.hadoop.conf.Configuration.getPasswordFromCredentialProviders(Configuration.java:1946)
      ... 11 more

      Attachments

        Issue Links

          Activity

            People

              jmaron Jonathan Maron
              jmaron Jonathan Maron
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: