[
https://issues.apache.org/jira/browse/MAPREDUCE-3669?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13188069#comment-13188069
]
Hudson commented on MAPREDUCE-3669:
-----------------------------------
Integrated in Hadoop-Mapreduce-trunk-Commit #1571 (See
[https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/1571/])
MAPREDUCE-3669. Allow clients to talk to MR HistoryServer using both
delegation tokens and kerberos. Contributed by Mahadev Konar.
acmurthy :
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1232580
Files :
* /hadoop/common/trunk/hadoop-mapreduce-project/CHANGES.txt
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/java/org/apache/hadoop/mapreduce/v2/api/HSClientProtocol.java
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/java/org/apache/hadoop/mapreduce/v2/api/impl/pb/client/HSClientProtocolPBClientImpl.java
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/java/org/apache/hadoop/mapreduce/v2/api/impl/pb/service/HSClientProtocolPBServiceImpl.java
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/java/org/apache/hadoop/mapreduce/v2/security/client/ClientHSSecurityInfo.java
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/java/org/apache/hadoop/yarn
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/java/org/apache/hadoop/yarn/proto
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/java/org/apache/hadoop/yarn/proto/HSClientProtocol.java
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-common/src/main/proto/MRClientProtocol.proto
*
/hadoop/common/trunk/hadoop-mapreduce-project/hadoop-mapreduce-client/hadoop-mapreduce-client-jobclient/src/main/java/org/apache/hadoop/mapred/ClientCache.java
> Getting a lot of PriviledgedActionException / SaslException when running a job
> ------------------------------------------------------------------------------
>
> Key: MAPREDUCE-3669
> URL: https://issues.apache.org/jira/browse/MAPREDUCE-3669
> Project: Hadoop Map/Reduce
> Issue Type: Bug
> Components: mrv2
> Affects Versions: 0.23.0
> Reporter: Thomas Graves
> Assignee: Mahadev konar
> Priority: Blocker
> Attachments: MAPREDUCE-3669.patch, MAPREDUCE-3669.patch
>
>
> On a secure cluster, when running a job we are seeing a lot of
> PriviledgedActionException / SaslExceptions. The job runs fine, its just the
> jobclient can't connect to the AM to get the progress information.
> Its in a very tight loop retrying while getting the exceptions.
> snip of the client log is:
> 12/01/13 15:33:45 INFO security.SecurityUtil: Acquired token Ident: 00 1c 68
> 61 64 6f 6f 70 71 61 40 44 45 56 2e 59 47
> 52 49 44 2e 59 41 48 4f 4f 2e 43 4f 4d 08 6d 61 70 72 65 64 71 61 00 8a 01 34
> d7 b3 ff f5 8a 01 34 fb c0 83 f5 08 02,
> Kind: HDFS_DELEGATION_TOKEN, Service: 10.10.10.10:8020
> 12/01/13 15:33:45 INFO hdfs.DFSClient: Created HDFS_DELEGATION_TOKEN token 8
> for user1 on 10.10.10.10:8020
> 12/01/13 15:33:45 INFO security.TokenCache: Got dt for
> hdfs://host1.domain.com:8020;uri=10.10.10.10:8020;t.service=10.10.10.10:8020
> 12/01/13 15:33:45 WARN conf.Configuration: mapred.used.genericoptionsparser
> is deprecated. Instead, use
> mapreduce.client.genericoptionsparser.used
> 12/01/13 15:33:45 INFO mapreduce.JobSubmitter: number of splits:2
> 12/01/13 15:33:45 INFO mapred.ResourceMgrDelegate: Submitted application
> application_1326410042859_0008 to
> ResourceManager at rmhost.domain/10.10.10.11:8040
> 12/01/13 15:33:45 INFO mapreduce.Job: Running job: job_1326410042859_0008
> 12/01/13 15:33:52 INFO mapred.ClientServiceDelegate: The url to track the job:
> rmhost.domain:8088/proxy/application_1326410042859_0008/
> 12/01/13 15:33:52 ERROR security.UserGroupInformation:
> PriviledgedActionException as:us...@dev.ygrid.yahoo.com
> (auth:SIMPLE) cause:javax.security.sasl.SaslException: GSS initiate failed
> [Caused by GSSException: No valid credentials provided (Mechanism level: Fail
> ed to find any
> Kerberos tgt)]
> 12/01/13 15:33:52 WARN ipc.Client: Exception encountered while connecting to
> the server :
> javax.security.sasl.SaslException: GSS initiate failed [Caused by
> GSSException: No valid credentials provided
> (Mechanism level: Failed to find any Kerberos tgt)]
> 12/01/13 15:33:52 ERROR security.UserGroupInformation:
> PriviledgedActionException as:us...@dev.ygrid.yahoo.com
> (auth:SIMPLE) cause:java.io.IOException: javax.security.sasl.SaslException:
> GSS initiate failed [Caused by GSSException: No valid credentials provided (
> Mechanism level:
> Failed to find any Kerberos tgt)]
> 12/01/13 15:33:52 INFO mapred.ClientServiceDelegate: The url to track the job:
> rmhost.domain:8088/proxy/application_1326410042859_0008/
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
