[
https://issues.apache.org/jira/browse/HADOOP-9747?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16341641#comment-16341641
]
Daryn Sharp commented on HADOOP-9747:
-------------------------------------
Thanks Bharat!
# Null user checks are unnecessary since they are impossible. The UGI ctor
will not allow a null user.
# Regarding loginUserfromSubject semantics, yes, it falls back to
OS_SPECIFIC_LOGIN. As noted in comments, it preserves current behavior
although I disagree with it. There's even an existing kerberos test that
breaks unless it falls back to the local user. Seems better to err on side of
caution at least for initial commit.
# Options no longer set for IBM_JAVA were removed because they aren't valid
options, but I can put them back...
# I'll add the missing test annotations.
# I'll see what I can do to enhance the documentation for login users, but
note that I didn't change the behavior so it'll just be an enhancement.
> Reduce unnecessary UGI synchronization
> --------------------------------------
>
> Key: HADOOP-9747
> URL: https://issues.apache.org/jira/browse/HADOOP-9747
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 0.23.0, 2.0.0-alpha, 3.0.0-alpha1
> Reporter: Daryn Sharp
> Assignee: Daryn Sharp
> Priority: Critical
> Attachments: HADOOP-9747-trunk-03.patch, HADOOP-9747-trunk.01.patch,
> HADOOP-9747-trunk.02.patch, HADOOP-9747.2.branch-2.patch,
> HADOOP-9747.2.trunk.patch, HADOOP-9747.branch-2.patch, HADOOP-9747.trunk.patch
>
>
> Jstacks of heavily loaded NNs show up to dozens of threads blocking in the
> UGI.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org
