[ 
https://issues.apache.org/jira/browse/YARN-1252?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13805828#comment-13805828
 ] 

Omkar Vinit Joshi commented on YARN-1252:
-----------------------------------------

YARN-674 should solve this problem. Now as token renewal is asynchronous in 
nature so if the token in unknown or external system (token renewing system) is 
down then the application for which this token was submitted will be marked as 
failed without crashing RM.

> Secure RM fails to start up in secure HA setup with Renewal request for 
> unknown token exception
> -----------------------------------------------------------------------------------------------
>
>                 Key: YARN-1252
>                 URL: https://issues.apache.org/jira/browse/YARN-1252
>             Project: Hadoop YARN
>          Issue Type: Bug
>          Components: resourcemanager
>    Affects Versions: 2.1.1-beta
>            Reporter: Arpit Gupta
>            Assignee: Omkar Vinit Joshi
>
> {code}
> 2013-09-26 08:15:20,507 INFO  ipc.Server (Server.java:run(861)) - IPC Server 
> Responder: starting
> 2013-09-26 08:15:20,521 ERROR security.UserGroupInformation 
> (UserGroupInformation.java:doAs(1486)) - PriviledgedActionException 
> as:rm/host@realm (auth:KERBEROS) 
> cause:org.apache.hadoop.security.token.SecretManager$InvalidToken: Renewal 
> request for unknown token
>         at 
> org.apache.hadoop.security.token.delegation.AbstractDelegationTokenSecretManager.renewToken(AbstractDelegationTokenSecretManager.java:388)
>         at 
> org.apache.hadoop.hdfs.server.namenode.FSNamesystem.renewDelegationToken(FSNamesystem.java:5934)
>         at 
> org.apache.hadoop.hdfs.server.namenode.NameNodeRpcServer.renewDelegationToken(NameNodeRpcServer.java:453)
>         at 
> org.apache.hadoop.hdfs.protocolPB.ClientNamenodeProtocolServerSideTranslatorPB.renewDelegationToken(ClientNamenodeProtocolServerSideTranslatorPB.java:851)
>         at 
> org.apache.hadoop.hdfs.protocol.proto.ClientNamenodeProtocolProtos$ClientNamenodeProtocol$2.callBlockingMethod(ClientNamenodeProtocolProtos.java:59650)
>         at 
> org.apache.hadoop.ipc.ProtobufRpcEngine$Server$ProtoBufRpcInvoker.call(ProtobufRpcEngine.java:585)
>         at org.apache.hadoop.ipc.RPC$Server.call(RPC.java:928)
>         at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2048)
>         at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:2044)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAs(Subject.java:415)
>         at 
> org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1483)
>         at org.apache.hadoop.ipc.Server$Handler.run(Server.java:2042
> {code}



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to