Uploaded image for project: 'CDAP'
  1. CDAP
  2. CDAP-7438

UpgradeTool and HBaseQueueDebugger should kinit before execution

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.5.1
    • Fix Version/s: 3.5.2
    • Component/s: Security
    • Labels:
    • Release Notes:
      Removed the requirement of running "kinit" prior to running either the Upgrade or Transaction Debugger tools of CDAP on a secure Hadoop cluster.
    • Rank:
      1|hzzn2f:

      Description

      In Upgrade Tool documentation, we suggest that the user does kinit before running the UpgradeTool. However, if the ticket cache is different for the Java process, the Kerberos ticket will not be accessible for the UpgradeTool, and it will result in GSS errors (no valid Kerberos ticket found).

      A fix would be to call SecurityUtil.loginForMasterService in those tools, before the rest of their execution.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                ali.anwar Ali Anwar
                Reporter:
                ali.anwar Ali Anwar
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: