[ https://issues.apache.org/jira/browse/HADOOP-15294?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16397198#comment-16397198 ]
Takanobu Asanuma commented on HADOOP-15294: ------------------------------------------- Uploaded the 1st patch. In HADOOP-15291, we added the validations that the Set of Principals is not empty. But it is not sufficient because there is a case that the Principals still remains after logout. The failed test, {{TestUGILoginFromKeytab#testReloginAfterFailedRelogin()}}, is that case. Therefore, we need to check the Kerberos Private Credentials rather than the Principals. It is more rigorous. > TestUGILoginFromKeytab fails on Java9 > ------------------------------------- > > Key: HADOOP-15294 > URL: https://issues.apache.org/jira/browse/HADOOP-15294 > Project: Hadoop Common > Issue Type: Sub-task > Components: security > Environment: Applied HADOOP-12760 and HDFS-11610 > Reporter: Takanobu Asanuma > Assignee: Takanobu Asanuma > Priority: Major > Attachments: HADOOP-15294.1.patch > > > This is the same cause as HADOOP-15291, but this time we may need to fix > {{UserGroupInformation}}. > {noformat} > [ERROR] > testReloginAfterFailedRelogin(org.apache.hadoop.security.TestUGILoginFromKeytab) > Time elapsed: 1.157 s <<< ERROR! > org.apache.hadoop.security.KerberosAuthException: > Login failure for user: us...@example.com > javax.security.auth.login.LoginException: java.lang.NullPointerException: > invalid null input(s) > at java.base/java.util.Objects.requireNonNull(Objects.java:246) > at > java.base/javax.security.auth.Subject$SecureSet.remove(Subject.java:1172) > ... > at > org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.logout(UserGroupInformation.java:1888) > at > org.apache.hadoop.security.UserGroupInformation.unprotectedRelogin(UserGroupInformation.java:1129) > at > org.apache.hadoop.security.UserGroupInformation.relogin(UserGroupInformation.java:1109) > at > org.apache.hadoop.security.UserGroupInformation.reloginFromKeytab(UserGroupInformation.java:1078) > at > org.apache.hadoop.security.UserGroupInformation.reloginFromKeytab(UserGroupInformation.java:1060) > at > org.apache.hadoop.security.TestUGILoginFromKeytab.testReloginAfterFailedRelogin(TestUGILoginFromKeytab.java:363) > {noformat} -- This message was sent by Atlassian JIRA (v7.6.3#76005) --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org