[HUE-9599] [jobbrowser] Logs HTTP 500 Error from nodemanager (amContainerLogs) - Cloudera Open Source

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Incomplete
Affects Version/s: 4.7.0
Fix Version/s: None
Component/s: app.jobbrowser
Labels:
None
Environment:
Hide

hadoop configurations

hadoop.security.authentication=kerberos hadoop.security.authorization=true hadoop.http.authentication.type=simple

hue.ini

[hadoop] [[hdfs_clusters]] [[[default]]] security_enabled=true
Show
hadoop configurations hadoop.security.authentication=kerberos hadoop.security.authorization= true hadoop.http.authentication.type=simple hue.ini [hadoop] [[hdfs_clusters]] [[[ default ]]] security_enabled= true

Description

HUE Error logs:
[09/Nov/2020 13:07:17 +0900] kerberos_ ERROR handle_other(): Mutual authentication unavailable on 500 response

In this cluster (kerberized but not use http.authentication),

Hue couldn't fetch logs from nodemanagers.

Because, nodemanagers in this cluster can't authenticate the remote user.

For examples, API to . /node/containerlogs/...?doAs=USER, get failed from the nodemanger.

java.lang.IllegalArgumentException: Null user at org.apache.hadoop.security.UserGroupInformation.createRemoteUser(UserGroupInformation.java:1503) at org.apache.hadoop.security.UserGroupInformation.createRemoteUser(UserGroupInformation.java:1490) at org.apache.hadoop.security.AuthenticationWithProxyUserFilter.doFilter(AuthenticationWithProxyUserFilter.java:73)

Attachments

Activity

People

Assignee:

Unassigned

Reporter:

Sungpeo Kook

Votes:

0 Vote for this issue

Watchers:

2 Start watching this issue

Dates

Created:

28/Nov/20 7:56 AM

Updated:

26/Feb/21 10:48 PM

Resolved:

26/Feb/21 10:48 PM