IBM Support

ACCESS DENIED FOR USER AS_USER. SUPERUSER PRIVILEGE IS REQUIRED

Troubleshooting


Problem

When operating in a Kerberos-enabled Cloudera environment the following can be seen in the Analytic Server logs: Ý11/7/17 10:20:36:111 EST¨ 00000119 SystemOut O 2017-11-07 10:20:36,111 | : | | | | | ERROR | slmtagoutput.SlmOuputAgent | SLM Logger => Error in performing callback function when calculating number of nodes in kerberos environment: org.apache.hadoop.ipc.RemoteException(org.apache.hadoop.security .AccessControlException): Access denied for user as_user. Superuser privilege is required at org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check SuperuserPrivilege(FSPermissionChecker.java:93) at org.apache.hadoop.hdfs.server.namenode.FSNamesystem.checkSuperus erPrivilege(FSNamesystem.java:6659) at org.apache.hadoop.hdfs.server.namenode.FSNamesystem.datanodeRepo rt(FSNamesystem.java:5647) at org.apache.hadoop.hdfs.server.namenode.NameNodeRpcServer.getData nodeReport(NameNodeRpcServer.java:928) at org.apache.hadoop.hdfs.server.namenode.AuthorizationProviderProx yClientProtocol.getDatanodeReport(AuthorizationProviderProxyClie ntProtocol.java:390) at org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolServerSi deTranslatorPB.getDatanodeReport(ClientNamenodeProtocolServerSid eTranslatorPB.java:694) at org.apache.hadoop.hdfs.protocol.proto.ClientNamenodeProtocolProt os$ClientNamenodeProtocol$2.callBlockingMethod(ClientNamenodePro tocolProtos.java) at org.apache.hadoop.ipc.ProtobufRpcEngine$Server$ProtoBufRpcInvoke r.call(ProtobufRpcEngine.java:617) at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:1073) at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2220) at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2216) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:422) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupIn formation.java:1920) at org.apache.hadoop.ipc.Server$Handler.run(Server.java:2214) This was traced to permissions problems in the hdfs and group membership for the 'as_user' user.

[{"Product":{"code":"SSWLVY","label":"IBM SPSS Analytic Server"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"Analytic Server","Platform":[{"code":"PF016","label":"Linux"}],"Version":"3.1.1","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
15 March 2019

UID

swg22017491