Community Articles
Find and share helpful community-sourced technical articles
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.
Labels (1)

SYMPTOM: Knox can get LDAP user but can't find related groups. Our LDAP is an openldap (REDHAT). The membership attribute is defined in groups with "uniquemember"


2016-05-09 14:42:01,229 INFO hadoop.gateway ( - Computed userDn: uid=a196011,ou=people,dc=hadoop,dc=apache,dc=org using dnTemplate for principal: a196011 
2016-05-09 14:42:01,230 INFO hadoop.gateway ( - Could not login: org.apache.shiro.authc.UsernamePasswordToken - a196011, rememberMe=false ( 
2016-05-09 14:42:01,230 DEBUG hadoop.gateway ( - Failed to Authenticate with LDAP server: {1} 
org.apache.shiro.authc.AuthenticationException: LDAP naming error while attempting to authenticate user. 
at org.apache.shiro.realm.ldap.JndiLdapRealm.doGetAuthenticationInfo( 

The above initial error was wrt ldap misconfiguration. Correcting ldap configuration below was the error -

"operation not supported in Standby mode" 

2016-04-29 23:59:08,389 ERROR provider.BaseAuditHandler ( - Error writing to log file.
java.lang.IllegalArgumentException: bigre7clu
	at org.apache.hadoop.hdfs.NameNodeProxies.createNonHAProxy(
	at org.apache.hadoop.hdfs.NameNodeProxies.createProxy(
	at org.apache.hadoop.hdfs.DFSClient.<init>(
	at org.apache.hadoop.hdfs.DFSClient.<init>(
	at org.apache.hadoop.hdfs.DistributedFileSystem.initialize(
	at org.apache.hadoop.fs.FileSystem.createFileSystem(
	at org.apache.hadoop.fs.FileSystem.access$200(
	at org.apache.hadoop.fs.FileSystem$Cache.getInternal(
	at org.apache.hadoop.fs.FileSystem$Cache.get(
	at org.apache.hadoop.fs.FileSystem.get(
	at org.apache.ranger.audit.destination.HDFSAuditDestination.getLogFileStream(
	at org.apache.ranger.audit.destination.HDFSAuditDestination.logJSON(
	at org.apache.ranger.audit.queue.AuditFileSpool.sendEvent(
	at org.apache.ranger.audit.queue.AuditFileSpool.runDoAs(
	at org.apache.ranger.audit.queue.AuditFileSpool$
	at org.apache.ranger.audit.queue.AuditFileSpool$
	at Method)
Caused by: bigre7clu

ROOT CAUSE: Found that customer was having namenode HA and Knox was not configured with Namenode HA.

RESOLUTION: Configured Knox with HA for webhdfs which resolved the issue.


Don't have an account?
Coming from Hortonworks? Activate your account here
Version history
Revision #:
1 of 1
Last update:
‎12-27-2016 08:06 PM
Updated by:
Top Kudoed Authors