Return-Path: X-Original-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Delivered-To: apmail-hadoop-common-issues-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id CDB75E2BA for ; Sat, 15 Dec 2012 13:40:15 +0000 (UTC) Received: (qmail 76482 invoked by uid 500); 15 Dec 2012 13:40:15 -0000 Delivered-To: apmail-hadoop-common-issues-archive@hadoop.apache.org Received: (qmail 76204 invoked by uid 500); 15 Dec 2012 13:40:15 -0000 Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: common-issues@hadoop.apache.org Delivered-To: mailing list common-issues@hadoop.apache.org Received: (qmail 76121 invoked by uid 99); 15 Dec 2012 13:40:13 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 15 Dec 2012 13:40:13 +0000 Date: Sat, 15 Dec 2012 13:40:13 +0000 (UTC) From: "Kai Zheng (JIRA)" To: common-issues@hadoop.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (HADOOP-9125) LdapGroupsMapping threw CommunicationException after some idle time MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HADOOP-9125?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Kai Zheng updated HADOOP-9125: ------------------------------ Attachment: (was: HADOOP-9125.patch) > LdapGroupsMapping threw CommunicationException after some idle time > ------------------------------------------------------------------- > > Key: HADOOP-9125 > URL: https://issues.apache.org/jira/browse/HADOOP-9125 > Project: Hadoop Common > Issue Type: Bug > Components: security > Affects Versions: 0.23.3, 2.0.0-alpha > Reporter: Kai Zheng > Fix For: 2.0.3-alpha > > Attachments: HADOOP-9125.patch, HADOOP-9125.patch > > Original Estimate: 24h > Remaining Estimate: 24h > > LdapGroupsMapping threw exception as below after some idle time. During the idle time no call to the group mapping provider should be made to repeat it. > 2012-12-07 02:20:59,738 WARN org.apache.hadoop.security.LdapGroupsMapping: Exception trying to get groups for user aduser2 > javax.naming.CommunicationException: connection closed [Root exception is java.io.IOException: connection closed]; remaining name 'CN=Users,DC=EXAMPLE,DC=COM' > at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1983) > at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1827) > at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1752) > at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1769) > at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:394) > at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:376) > at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358) > at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267) > at org.apache.hadoop.security.LdapGroupsMapping.getGroups(LdapGroupsMapping.java:187) > at org.apache.hadoop.security.CompositeGroupsMapping.getGroups(CompositeGroupsMapping.java:97) > at org.apache.hadoop.security.Groups.doGetGroups(Groups.java:103) > at org.apache.hadoop.security.Groups.getGroups(Groups.java:70) > at org.apache.hadoop.security.UserGroupInformation.getGroupNames(UserGroupInformation.java:1035) > at org.apache.hadoop.hbase.security.User.getGroupNames(User.java:90) > at org.apache.hadoop.hbase.security.access.TableAuthManager.authorize(TableAuthManager.java:355) > at org.apache.hadoop.hbase.security.access.AccessController.requirePermission(AccessController.java:379) > at org.apache.hadoop.hbase.security.access.AccessController.getUserPermissions(AccessController.java:1051) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) > at java.lang.reflect.Method.invoke(Method.java:597) > at org.apache.hadoop.hbase.regionserver.HRegion.exec(HRegion.java:4914) > at org.apache.hadoop.hbase.regionserver.HRegionServer.execCoprocessor(HRegionServer.java:3546) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) > at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) > at java.lang.reflect.Method.invoke(Method.java:597) > at org.apache.hadoop.hbase.ipc.SecureRpcEngine$Server.call(SecureRpcEngine.java:372) > at org.apache.hadoop.hbase.ipc.HBaseServer$Handler.run(HBaseServer.java:1399) > Caused by: java.io.IOException: connection closed > at com.sun.jndi.ldap.LdapClient.ensureOpen(LdapClient.java:1558) > at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:503) > at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1965) > ... 28 more > 2012-12-07 02:20:59,739 WARN org.apache.hadoop.security.UserGroupInformation: No groups available for user aduser2 -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira