MapR - Drill does not start after enabling kerberos - Fails with exception [ YouShouldntSeeThisErrorUnlessYourJVMhadoop.loginPropertiesAreBad ]

-
This kind of exception messages probably if you could see when your Drillbit does not start after enabling kerberos authentication by following this article.

From drillbit.out file

Caused by: java.io.IOException: Login failure for mapr/my52cluster@SATZ.COM from keytab /opt/mapr/conf/mapr.keytab: javax.security.auth.log
in.LoginException: unable to find LoginModule class: YouShouldntSeeThisErrorUnlessYourJVMhadoop.loginPropertiesAreBad
        at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:907)
        at org.apache.drill.exec.server.BootStrapContext.login(BootStrapContext.java:145)
        ... 5 more
Caused by: javax.security.auth.login.LoginException: unable to find LoginModule class: YouShouldntSeeThisErrorUnlessYourJVMhadoop.loginProp
ertiesAreBad
        at javax.security.auth.login.LoginContext.invoke(LoginContext.java:794)
        at javax.security.auth.login.LoginContext.access$000(LoginContext.java:195)
        at javax.security.auth.login.LoginContext$4.run(LoginContext.java:682)
        at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
        at javax.security.auth.login.LoginContext.login(LoginContext.java:587)
        at org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:897)
        ... 6 more

From drillbit.log file
It just hangs with below messages
2017-11-13 10:24:04,518 [main] WARN  org.apache.drill.common.KerberosUtil - Converting service name (myClusterName) to lowercase, see HADOOP-7988.

Resolution

 It happens generally because of incorrect login module configuration / missing configuration

Correct the drill-env.sh under [ /opt/mapr/drill/drill-<version>/conf] as below (if not add the below line in that file)

export DRILL_JAVA_OPTS="$DRILL_JAVA_OPTS -Dmapr_sec_enabled=true -Dhadoop.login=hybrid -Dzookeeper.saslprovider=com.mapr.security.maprsasl.
MaprSaslProvider -Dmapr.library.flatclass"


Also note that MapR drill works only with drill-1.10 and above.
Location: Chennai, Tamil Nadu, India

Comments

Post a Comment

Popular posts from this blog

Querying MapR DB tables from Drill

-
1. Create a storage plugin for maprDB in drill Web UI {     "type" : "hbase",      "enabled" : true,               config" : { "hbase.table.namespace.mappings" : "*:/tables" #Change the path where you have mapr tables } } 2. Connect to drill ./sqline !connect jdbc:drill:zk=10.10.71.12:5181   sqlline> !connect jdbc:drill:zk=10.10.71.12:5181 scan complete in 406ms Enter username for jdbc:drill:zk=10.10.71.12:5181: mapr Enter password for jdbc:drill:zk=10.10.71.12:5181: **** 0: jdbc:drill:zk=10.10.71.12:5181> 3. Change the storage plugin to maprdb (or the name you have given) 0: jdbc:drill:zk=10.10.71.12:5181> use maprdb; +-------+-------------------------------------+ |  ok   |               summary               | +-------+-------------------------------------+ | true ...
Read more

OpenSSL Certificate creations

-
Create Self Signed Certificate Here are the steps involved in creating self signed certificate a) Create a key b) Generate Certificate Sign request .csr c) Sign your certificate (As it is self signed) a) Create a key Create a directory first (to avoid confusions) #mkdir certificates #cd certificates Generate key file #openssl genrsa 1024 > private.key b) Generate Certificate Sign request .csr #openssl req -new -key private.key > certrequest.csr c) Sign your certificate (As it is self Signed) #openssl x509 -in certrequest.csr -out selfsigned.crt -req -signkey private.key -days 365 Here the -days is the number of days denotes the validity of certificate Once after this we can get the certificate as file "selfsigned.crt"
Read more

HTTP Fs Installation

-
Some steps are specific to MapR Cluster. Ignore those steps. 1. Setup Yum repositories for MapR 2. Check for the packages           yum list mapr-httpfs 3. Install ==> yum install mapr-httpfs 4. Configure the core-site.xml and httpfs-site.xml properties to add impersonations                                                 <property>         <name>hadoop.proxyuser.#HTTPFSUSER#.hosts</name>         <value>httpfs-host.foo.com</value>        </property>         <property>             <name>hadoop.proxyuser.#HTTPFSUSER#.groups</name>     ...
Read more