[ 
https://issues.apache.org/jira/browse/HADOOP-15597?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Eric Yang resolved HADOOP-15597.
--------------------------------
    Resolution: Duplicate

> UserGroupInformation class throws NPE when Kerberos TGT expired
> ---------------------------------------------------------------
>
>                 Key: HADOOP-15597
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15597
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.9.0, 3.0.0, 3.1.0, 2.9.1, 3.0.1, 3.0.2, 2.9.2
>            Reporter: Eric Yang
>            Priority: Critical
>
> UserGroupInformation class throws NPE RuntimeException when tgt renewer can 
> not determine expiration time:
> {code}
> Thread Thread[TGT Renewer for rm/host1.example....@example.com,5,main] threw 
> an Exception.
> java.lang.NullPointerException
>         at 
> javax.security.auth.kerberos.KerberosTicket.getEndTime(KerberosTicket.java:482)
>         at 
> org.apache.hadoop.security.UserGroupInformation$1.run(UserGroupInformation.java:894)
>         at java.lang.Thread.run(Thread.java:745)
> {code}
> The error occurs when Hadoop daemon processes uses UGI class to do service 
> tgt renewal.  The code is written that reattachMetrics() must be called by 
> the main program to initialize UGI metrics.  Metrics initialization is only 
> called by resource manager.  Other Hadoop processes do not call 
> reattachMetrics().  The runtime exception could cause interruption to Hadoop 
> services as observed in YARN RegistryDNS (YARN-8514).  It would be nice if 
> metrics initialization happens in UGI class without reliance on Hadoop 
> program to make UGI metrics initialization.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org

Reply via email to