GitHub user jerryshao opened a pull request:
https://github.com/apache/spark/pull/18633
[SPARK-21411][YARN] Lazily create FS within kerberized UGI to avoid token
acquiring failure
## What changes were proposed in this pull request?
In the current `YARNHadoopDelegationTokenManager`, `FileSystem` to which to
get tokens are created out of KDC logged UGI, using these `FileSystem` to get
new tokens will lead to exception. The main thing is that Spark code trying to
get new tokens from the FS created with token auth-ed UGI, but Hadoop can only
grant new tokens in kerberized UGI. To fix this issue, we should lazily create
these FileSystem within KDC logged UGI.
## How was this patch tested?
Manual verification in secure cluster.
CC @vanzin @mgummelt please help to review, thanks!
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/jerryshao/apache-spark SPARK-21411
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/spark/pull/18633.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #18633
----
commit 9a4f01217b75555ff6219097fe7f4080ecc51125
Author: jerryshao <ss...@hortonworks.com>
Date: 2017-07-14T03:28:59Z
Lazily create FS within kerberized UGI to avoid token acquiring failure
Change-Id: I8b35ac9c946ae4396aa26ca4ba3107f4b37ac3d6
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org
