Security Forum

How to set execute permissions on windows

  • #50736
    Bill Carroll
    Participant

    Installed HDP 2.0 windows on windows server 2012 successfully and running simple wordcount mapreduce and get an exception from container-launch. Looking at syslog I see I have a FSPermissions check failure on the account, wcarroll, running wordcount. What is the proper configuration to give the user permission on windows? The wcarroll user is a member of HadoopUsers group.

    Application application_1395680080745_0004 failed 2 times due to AM Container for appattempt_1395680080745_0004_000002 exited with exitCode: 1 due to: Exception from container-launch:
    org.apache.hadoop.util.Shell$ExitCodeException:
    at org.apache.hadoop.util.Shell.runCommand(Shell.java:464)
    at org.apache.hadoop.util.Shell.run(Shell.java:379)

    2014-03-28 14:30:51,307 INFO [main] org.apache.hadoop.service.AbstractService: Service JobHistoryEventHandler failed in state INITED; cause: org.apache.hadoop.yarn.exceptions.YarnRuntimeException: org.apache.hadoop.security.AccessControlException: Permission denied: user=wcarroll, access=EXECUTE, inode=”/mapred”:hadoop:hdfs:drwxrwx—
    at org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.check(FSPermissionChecker.java:234)
    at org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkTraverse(FSPermissionChecker.java:187)
    at org.apache.hadoop.hdfs.server.namenode.FSPermissionChecker.checkPermission(FSPermissionChecker.java:150)
    at org.apache.hadoop.hdfs.server.namenode.FSNamesystem.checkPermission(FSNamesystem.java:5193)
    at org.apache.hadoop.hdfs.server.namenode.FSNamesystem.checkPermission(FSNamesystem.java:5175)
    at org.apache.hadoop.hdfs.server.namenode.FSNamesystem.checkTraverse(FSNamesystem.java:5154)
    at org.apache.hadoop.hdfs.server.namenode.FSNamesystem.getFileInfo(FSNamesystem.java:3295)
    at org.apache.hadoop.hdfs.server.namenode.NameNodeRpcServer.getFileInfo(NameNodeRpcServer.java:749)
    at org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolServerSideTranslatorPB.getFileInfo(ClientNamenodeProtocolServerSideTranslatorPB.java:692)
    at org.apache.hadoop.hdfs.protocol.proto.ClientNamenodeProtocolProtos$ClientNamenodeProtocol$2.callBlockingMethod(ClientNamenodeProtocolProtos.java:59628)
    at org.apache.hadoop.ipc.ProtobufRpcEngine$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine.java:585)
    at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:928)
    at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2053)
    at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2049)
    at java.security.AccessController.doPrivileged(Native Method)
    at javax.security.auth.Subject.doAs(Subject.java:415)
    at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1491)
    at org.apache.hadoop.ipc.Server$Handler.run(Server.java:2047)

    org.apache.hadoop.yarn.exceptions.YarnRuntimeException: org.apache.hadoop.security.AccessControlException: Permission denied: user=wcarroll, access=EXECUTE, inode=”/mapred”:hadoop:hdfs:drwxrwx—

to create new topics or reply. | New User Registration

  • Author
    Replies
  • #50772
    Timothee Gautheron
    Participant

    Hi Bill, i’m just another HDP user, but maybe I can help you with this.

    You said “The wcaroll user is a member of HadoopUsers group” , okay, but by default this group is “hadoop” right ? Browsing you log, i saw that the folder you are trying to use with your “wcaroll” user is under this acl : ”/mapred”:hadoop:hdfs:drwxrwx—
    Meaning “hadoop” is the user, “hdfs” is the group. So of course “wcaroll” cannot access it, and since the default group is not set here you cannot access it through the group either.

    Juste my 2cents.

    #51134
    Vinay Shukla
    Moderator

    Thanks to Timothee for great debugging. You can add a user to a group on Windows as follows.

    net localgroup group_name UserLoginName /add

    #51194
    Bill Carroll
    Participant

    Thanks everyone! I created a local group named hdfs and added the local user hadoop to it and wordcount ran successful. Would be nice if the install created the group and added the user!

You must be to reply to this topic. | Create Account

Support from the Experts

A HDP Support Subscription connects you experts with deep experience running Apache Hadoop in production, at-scale on the most demanding workloads.

Enterprise Support »

Become HDP Certified

Real world training designed by the core architects of Hadoop. Scenario-based training courses are available in-classroom or online from anywhere in the world

Training »

Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.