Created on 03-31-2014 01:46 AM - edited 09-16-2022 01:56 AM
Hi,
after disabling Kerberos the HBase Master won't start because no access to zookeeper znode /hbase/shutdown. I tried to remove it in zookeeper shell (started as user root), but no success =>
[zk: localhost:2181(CONNECTED) 3] rmr /hbase/shutdown
Authentication is not valid : /hbase/shutdown
[zk: localhost:2181(CONNECTED) 4] getAcl /hbase/shutdown
'sasl,'hbase
: cdrwa
[zk: localhost:2181(CONNECTED) 5]
How can I forcibly deltete that subtree to be able to start HBase afterwards?
Error in HBase Master log:
2014-03-31 10:23:41,760 WARN org.apache.hadoop.hbase.zookeeper.ZKUtil: master:60000-0x4451714a72b004b Unable to get data of znode /hbase/shutdown
org.apache.zookeeper.KeeperException$NoAuthException: KeeperErrorCode = NoAuth for /hbase/shutdown
thanks in advance...Gerd...
Created 04-01-2014 02:54 PM
Gerd,
backing out kerberos is not an automatic process currently as there can be many services using Zookeeper and it retains those ACLs which were set while kerberos was enabled. We have developed a little java program for our customers that backs out the ACLs from ZK, but all it really does is iterate over all the znodes in /hbase and set their acls to world:anyone.
So, you can just manually do this as well. This is an example:
setAcl /hbase world:anyone:cdrwa
You would need to do that on every znode under /hbase and the master will start.
HTH,
Clint
Created 04-26-2017 02:57 AM
It should be -Dzookeeper.skipACL=yes (Be careful not true,yes). And it works for me
Created 10-13-2018 03:54 AM
Hi Harsh,
Thanks alot for your support.
Really appreciate.
I was able to make hbase stable by adding the line mentioned by you but the only one change was reuiqred.
-Dzookeeper.skipACL=yes
we need to give "yes" not true.
It worked for me.
Thanks for making my cluster happpy.
Regards
Ayush