Uploaded image for project: 'CDAP'
  1. CDAP
  2. CDAP-15947

Unable to run scheduled pipeline in default namespace

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 5.1.2
    • Fix Version/s: None
    • Component/s: App Fabric
    • Labels:
      None
    • Rank:
      1|i00riv:

      Description

      While running a schedule pipeline under "default" namespace it giving following error in master logs and pipeline got failed.

      2019-09-24 16:30:08,276 - INFO [program.status:c.c.c.i.a.r.d.DistributedProgramRunner@220] - expandedProgramJarLocationPath: hdfs://rafpa001/cdap/namespaces/system/artifacts/cdap-data-pipeline/expanded.5.1.207.e24c414f-adbd-4c10-a932-9459498cba43.zip
      2019-09-24 16:30:33,450 - ERROR [program.status:o.a.r.a.p.MiscUtil@627] - Error getting groups for users. userName=
      java.lang.IllegalArgumentException: Null user
      at org.apache.hadoop.security.UserGroupInformation.createRemoteUser(UserGroupInformation.java:1269) ~[hadoop-common-3.1.1.3.1.0.0-78.jar:na]
      at org.apache.hadoop.security.UserGroupInformation.createRemoteUser(UserGroupInformation.java:1256) ~[hadoop-common-3.1.1.3.1.0.0-78.jar:na]
      at org.apache.ranger.audit.provider.MiscUtil.getGroupsForRequestUser(MiscUtil.java:580) ~[ranger-plugins-audit-0.7.0.jar:0.7.0]
      at co.cask.cdap.security.authorization.ranger.binding.RangerAuthorizer.enforce(RangerAuthorizer.java:195) [1568894223981-0/:na]
      at co.cask.cdap.security.authorization.ranger.binding.RangerAuthorizer.isVisible(RangerAuthorizer.java:119) [1568894223981-0/:na]
      at co.cask.cdap.security.authorization.DefaultAuthorizationEnforcer.isVisible(DefaultAuthorizationEnforcer.java:93) [na:na]
      at co.cask.cdap.security.authorization.AuthorizationUtil.ensureAccess(AuthorizationUtil.java:131) [na:na]
      at co.cask.cdap.internal.app.namespace.DefaultNamespaceAdmin.get(DefaultNamespaceAdmin.java:418) [na:na]
      at co.cask.cdap.security.impersonation.DefaultOwnerAdmin.getNamespaceConfig(DefaultOwnerAdmin.java:112) [na:na]
      at co.cask.cdap.security.impersonation.DefaultOwnerAdmin.getImpersonationInfo(DefaultOwnerAdmin.java:81) [na:na]
      at co.cask.cdap.security.impersonation.SecurityUtil.createImpersonationInfo(SecurityUtil.java:245) [na:na]
      at co.cask.cdap.security.impersonation.AbstractCachedUGIProvider.getPrincipalForEntity(AbstractCachedUGIProvider.java:115) [na:na]
      at co.cask.cdap.security.impersonation.AbstractCachedUGIProvider.getConfiguredUGI(AbstractCachedUGIProvider.java:82) [na:na]
      at co.cask.cdap.security.impersonation.DefaultImpersonator.getUGI(DefaultImpersonator.java:101) [na:na]
      at co.cask.cdap.security.impersonation.DefaultImpersonator.doAs(DefaultImpersonator.java:69) [na:na]
      at co.cask.cdap.security.impersonation.DefaultImpersonator.doAs(DefaultImpersonator.java:63) [na:na]
      at co.cask.cdap.internal.app.runtime.distributed.DistributedProgramRunner.run(DistributedProgramRunner.java:373) [na:na]
      at co.cask.cdap.app.runtime.AbstractProgramRuntimeService.run(AbstractProgramRuntimeService.java:167) [na:na]
      at co.cask.cdap.internal.app.services.ProgramLifecycleService.startInternal(ProgramLifecycleService.java:547) [na:na]
      at co.cask.cdap.internal.app.services.ProgramNotificationSubscriberService.lambda$handleClusterEvent$0(ProgramNotificationSubscriberService.java:425) [na:na]
      at co.cask.cdap.internal.app.services.ProgramNotificationSubscriberService.postProcess(ProgramNotificationSubscriberService.java:155) [na:na]
      at co.cask.cdap.messaging.subscriber.AbstractMessagingSubscriberService.runTask(AbstractMessagingSubscriberService.java:185) ~[na:na]
      at co.cask.cdap.common.service.AbstractRetryableScheduledService.runOneIteration(AbstractRetryableScheduledService.java:155) ~[na:na]
      at com.google.common.util.concurrent.AbstractScheduledService$1$1.run(AbstractScheduledService.java:170) ~[com.google.guava.guava-13.0.1.jar:na]
      at com.google.common.util.concurrent.AbstractScheduledService$CustomScheduler$ReschedulableCallable.call(AbstractScheduledService.java:355) ~[com.google.guava.guava-13.0.1.jar:na]
      at com.google.common.util.concurrent.AbstractScheduledService$CustomScheduler$ReschedulableCallable.call(AbstractScheduledService.java:321) ~[com.google.guava.guava-13.0.1.jar:na]
      at java.util.concurrent.FutureTask.run(FutureTask.java:266) ~[na:1.8.0_222]
      at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) ~[na:1.8.0_222]
      at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) ~[na:1.8.0_222]
      at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) ~[na:1.8.0_222]
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) ~[na:1.8.0_222]
      at java.lang.Thread.run(Thread.java:748) ~[na:1.8.0_222]
      2019-09-24 16:30:33,649 - ERROR [program.status:c.c.c.a.r.AbstractProgramRuntimeService@173] - Exception while trying to run program
      java.lang.RuntimeException: java.io.IOException: co.cask.cdap.security.spi.authorization.UnauthorizedException: Namespace namespace:default is not visible to principal Principal

      {name='', type=USER, kerberosPrincipal=null}

      since the principal does not have any privilege on this namespace or any entity in this namespace.
      at com.google.common.base.Throwables.propagate(Throwables.java:160) ~[com.google.guava.guava-13.0.1.jar:na]
      at co.cask.cdap.internal.app.runtime.distributed.DistributedProgramRunner.run(DistributedProgramRunner.java:377) ~[na:na]
      at co.cask.cdap.app.runtime.AbstractProgramRuntimeService.run(AbstractProgramRuntimeService.java:167) ~[na:na]
      at co.cask.cdap.internal.app.services.ProgramLifecycleService.startInternal(ProgramLifecycleService.java:547) [na:na]

        Attachments

          Activity

            People

            • Assignee:
              trishka Trishka
              Reporter:
              jainshasha Shashank Jain
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: