Eric Yang created HADOOP-15597:
----------------------------------
Summary: UserGroupInformation class throws NPE when Kerberos TGT
expired
Key: HADOOP-15597
URL: https://issues.apache.org/jira/browse/HADOOP-15597
Project: Hadoop Common
Issue Type: Bug
Components: security
Affects Versions: 3.0.2, 3.0.1, 2.9.1, 3.1.0, 3.0.0, 2.9.0, 2.9.2
Reporter: Eric Yang
UserGroupInformation class throws NPE RuntimeException when tgt renewer can not
determine expiration time:
{code}
Thread Thread[TGT Renewer for rm/host1.example....@example.com,5,main] threw an
Exception.
java.lang.NullPointerException
at
javax.security.auth.kerberos.KerberosTicket.getEndTime(KerberosTicket.java:482)
at
org.apache.hadoop.security.UserGroupInformation$1.run(UserGroupInformation.java:894)
at java.lang.Thread.run(Thread.java:745)
{code}
The error occurs when Hadoop daemon processes uses UGI class to do service tgt
renewal. The code is written that reattachMetrics() must be called by the main
program to initialize UGI metrics. Metrics initialization is only called by
resource manager. Other Hadoop processes do not call reattachMetrics(). The
runtime exception could cause interruption to Hadoop services as observed in
YARN RegistryDNS (YARN-8514). It would be nice if metrics initialization
happens in UGI class without reliance on Hadoop program to make UGI metrics
initialization.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org
