为什么我的 Mesos master 无法通过 slave 进行身份验证?
Why is my Mesos master failing authentication with slave?
我在我的机器上创建了一个主控文件,其中的凭据文件在网络上具有 public IP 而不是本地主机,如下所示:
./bin/mesos-master.sh --ip=192.168.0.3 --work_dir=/var/lib/mesos --credentials=file://master-cred.json
然后我在另一台机器上创建了一个slave如下:
./bin/mesos-slave.sh --ip=192.168.0.19 --master=<master-ip>:5050 --credential=file://slave-cred.json
然后 master 输出传入的身份验证请求,但每次都被拒绝:
I0903 15:17:48.264104 165863424 master.cpp:4728] Authenticating slave(1)@192.168.0.19:5051
I0903 15:17:48.264602 166936576 authenticator.cpp:92] Creating new server SASL connection
I0903 15:17:48.269961 165326848 authenticator.cpp:197] Received SASL authentication start
I0903 15:17:48.270058 165326848 authenticator.cpp:319] Authentication requires more steps
I0903 15:17:48.272733 166400000 authenticator.cpp:225] Received SASL authentication step
W0903 15:17:48.272817 166400000 authenticator.cpp:325] Authentication failure: authentication failure
W0903 15:17:48.273136 166400000 master.cpp:4755] Failed to authenticate slave(1)@192.168.0.19:5051: Refused authentication
两个凭据文件都是正确的。
这是从机的输出:
I0903 15:17:48.232733 2377 slave.cpp:747] Authenticating with master master@192.168.0.3:5050
I0903 15:17:48.232951 2377 slave.cpp:752] Using default CRAM-MD5 authenticatee
I0903 15:17:48.235091 2376 authenticatee.cpp:91] Initializing client SASL
I0903 15:17:48.239701 2376 authenticatee.cpp:115] Creating new client SASL connection
I0903 15:17:48.239914 2377 slave.cpp:720] Detecting new master
I0903 15:17:48.241755 2377 slave.cpp:4193] Received oversubscribable resources from the resource estimator
I0903 15:17:48.287488 2378 authenticatee.cpp:206] Received SASL authentication mechanisms: CRAM-MD5
I0903 15:17:48.287619 2378 authenticatee.cpp:232] Attempting to authenticate with mechanism 'CRAM-MD5'
I0903 15:17:48.290863 2378 authenticatee.cpp:252] Received SASL authentication step
Master master@192.168.0.3:5050 refused authentication
然而,当我 运行 奴隶与主人来自同一台机器时,它工作正常。有什么想法吗?
其实是我在slave虚拟机上设置网络的问题导致的。
我在我的机器上创建了一个主控文件,其中的凭据文件在网络上具有 public IP 而不是本地主机,如下所示:
./bin/mesos-master.sh --ip=192.168.0.3 --work_dir=/var/lib/mesos --credentials=file://master-cred.json
然后我在另一台机器上创建了一个slave如下:
./bin/mesos-slave.sh --ip=192.168.0.19 --master=<master-ip>:5050 --credential=file://slave-cred.json
然后 master 输出传入的身份验证请求,但每次都被拒绝:
I0903 15:17:48.264104 165863424 master.cpp:4728] Authenticating slave(1)@192.168.0.19:5051
I0903 15:17:48.264602 166936576 authenticator.cpp:92] Creating new server SASL connection
I0903 15:17:48.269961 165326848 authenticator.cpp:197] Received SASL authentication start
I0903 15:17:48.270058 165326848 authenticator.cpp:319] Authentication requires more steps
I0903 15:17:48.272733 166400000 authenticator.cpp:225] Received SASL authentication step
W0903 15:17:48.272817 166400000 authenticator.cpp:325] Authentication failure: authentication failure
W0903 15:17:48.273136 166400000 master.cpp:4755] Failed to authenticate slave(1)@192.168.0.19:5051: Refused authentication
两个凭据文件都是正确的。
这是从机的输出:
I0903 15:17:48.232733 2377 slave.cpp:747] Authenticating with master master@192.168.0.3:5050
I0903 15:17:48.232951 2377 slave.cpp:752] Using default CRAM-MD5 authenticatee
I0903 15:17:48.235091 2376 authenticatee.cpp:91] Initializing client SASL
I0903 15:17:48.239701 2376 authenticatee.cpp:115] Creating new client SASL connection
I0903 15:17:48.239914 2377 slave.cpp:720] Detecting new master
I0903 15:17:48.241755 2377 slave.cpp:4193] Received oversubscribable resources from the resource estimator
I0903 15:17:48.287488 2378 authenticatee.cpp:206] Received SASL authentication mechanisms: CRAM-MD5
I0903 15:17:48.287619 2378 authenticatee.cpp:232] Attempting to authenticate with mechanism 'CRAM-MD5'
I0903 15:17:48.290863 2378 authenticatee.cpp:252] Received SASL authentication step
Master master@192.168.0.3:5050 refused authentication
然而,当我 运行 奴隶与主人来自同一台机器时,它工作正常。有什么想法吗?
其实是我在slave虚拟机上设置网络的问题导致的。