hanson2021 opened a new issue #6412:
URL: https://github.com/apache/incubator-doris/issues/6412


   Doris version: 0.14
   Hadoop version: CDH6.3.2
   Spark version:2.4.6
   I created a spark load resource with
   CREATE EXTERNAL RESOURCE r_spark_cdh6
   PROPERTIES
   (
     "broker"="broker11",
     "broker.username"="hive",
     "broker.password"=""
   )
   And also I set HADOOP_USER_NAME=hive in the /root/.bashrc on the broker11, 
broker  server is started by system user root.
   Why still use root to read hdfs files ? the error as following:
   
   ```
   cluster:r_spark_cdh6; timeout(s):259200; max_filter_ratio:0.0 | 
type:ETL_RUN_FAIL; msg:errCode = 2, detailMessage = spark etl job failed. msg: 
Permission denied: user=root, access=READ, 
inode="/thdw/warehouse/test.db/doris_text_t1/000000_0":hive:hive:-rwxrwx--x
           at 
org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker.java:400)
           at 
org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkPermission(FSPermissionChecker.java:262)
           at 
org.apache.sentry.hdfs.SentryINodeAttributesProvider$SentryPermissionEnforcer.checkPermission(SentryINodeAttributesProvider.java:86)
           at 
org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkPermission(FSPermissionChecker.java:194)
           at 
org.apache.hadoop.hdfs.server.namenode.FSDirectory.checkPermission(FSDirectory.java:1855)
           at 
org.apache.hadoop.hdfs.server.namenode.FSDirectory.checkPermission(FSDirectory.java:1839)
           at 
org.apache.hadoop.hdfs.server.namenode.FSDirectory.checkPathAccess(FSDirectory.java:1789)
           at 
org.apache.hadoop.hdfs.server.namenode.FSDirStatAndListingOp.getBlockLocations(FSDirStatAndListingOp.java:154)
           at 
org.apache.hadoop.hdfs.server.namenode.FSNamesystem.getBlockLocations(FSNamesystem.java:1909)
           at 
org.apache.hadoop.hdfs.server.namenode.NameNodeRpcServer.getBlockLocations(NameNodeRpcServer.java:735)
           at 
org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolServerSideTranslatorPB.getBlockLocations(ClientNamenodeProtocolServerSideTranslatorPB.java:415)
           at 
org.apache.hadoop.hdfs.protocol.proto.ClientNamenodeProtocolProtos$ClientNamenodeProtocol$2.callBlockingMethod(ClientNamenodeProtocolProtos.java)
           at 
org.apache.hadoop.ipc.ProtobufRpcEngine$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine.java:523)
           at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:991)
           at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:869)
           at org.apache.hadoop.ipc.Server$RpcCall.run(Server.java:815)
           at java.security.AccessController.doPrivileged(Native Method)
           at javax.security.auth.Subject.doAs(Subject.java:422)
           at 
org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1875)
           at org.apache.hadoop.ipc.Server$Handler.run(Server.java:2675)
   ```
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org
For additional commands, e-mail: commits-h...@doris.apache.org

Reply via email to