Permission denied: user=falcon, access=EXECUTE, inode="/apps/falcon/extensions":hdfs:hdfs:drwx-----

[#1]

ERROR from falcon application log

=================

After installing falcon I see SERVICE UNAVAILABLE ERROR on falcon UI . On restart of falcon service see the below error which points hdfs:hdfs is user & group ownership and falcon cannot execute .

017-02-03 20:10:46,874 INFO  ipc.Server (Server.java:logException(2394)) - IPC Server handler 105 on 8020, call org.apache.hadoop.hdfs.protocol.ClientProtocol.getFileInfo from 192.
168.1.95:43132 Call#0 Retry#0: org.apache.hadoop.security.AccessControlException: Permission denied: user=falcon, access=EXECUTE, inode="/apps/falcon/extensions":hdfs:hdfs:drwx-----

Below is the output of hadoop fs -ls ...

[root@hdpkdc ~]# hadoop fs -ls /apps/falcon
Found 1 items
drwxr-xr-x - falcon users 0 2017-02-02 20:53 /apps/falcon/extensions
[root@hdpkdc ~]# hadoop fs -ls /apps/falcon/extensions
Found 4 items
drwxr-xr-x - falcon users 0 2017-02-02 20:53 /apps/falcon/extensions/hdfs-mirroring
drwxr-xr-x - falcon users 0 2017-02-02 20:53 /apps/falcon/extensions/hdfs-snapshot-mirroring
drwxr-xr-x - falcon users 0 2017-02-02 20:53 /apps/falcon/extensions/hive-mirroring
drwxrwx--- - falcon users 0 2017-02-02 20:53 /apps/falcon/extensions/mirroring

Thanks,

Jagdish

[#2]

@Jagdish Saripella

Are you using ranger for HDFS ACL? If yes configure ranger policy accordingly.

[#3]

@Jagdish Saripella Please check permissions/ownership for /apps/falcon. It should set as below.

[root@HOST]# hdfs dfs -ls -d /apps/falcon

drwxrwxrwx - falcon hdfs 0 2016-12-08 11:48 /apps/falcon

Also, check corresponding policies in ranger.

[#4 · Accepted solution]

@Ajay @prsingh

Ranger HDFS policy were configured was but since Hadoop ACL's are in place it should have let falcon user in .

As a workaround we tried a different path and that worked . Unable to replicate the same again . I guess we can close this ticket for now .

Thanks ...