hadoop-common-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] [Created] (HADOOP-12697) IPC retry policies should recognise that SASL auth failures are unrecoverable
Date Fri, 08 Jan 2016 11:14:39 GMT
Steve Loughran created HADOOP-12697:
---------------------------------------

             Summary: IPC retry policies should recognise that SASL auth failures are unrecoverable
                 Key: HADOOP-12697
                 URL: https://issues.apache.org/jira/browse/HADOOP-12697
             Project: Hadoop Common
          Issue Type: Bug
          Components: ipc
    Affects Versions: 2.7.1
         Environment: Cluster with kerberos on and client not calling with the right credentials
            Reporter: Steve Loughran
            Priority: Minor


SLIDER-1050 shows that if you don't have the right kerberos settings, the Yarn client IPC
channel blocks retrying to the talk to the RM, retrying repeatedly

{noformat}
2016-01-07 02:50:45,111 [main] WARN  ipc.Client - Exception encountered while connecting to
the server : javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException:
No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
{noformat}

SASL exceptions need to be recognised as irreconcilable authentication failures, rather than
generic IOEs that might go away if you retry



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message