hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-11174) Delegation token for KMS should only be got once if it already exists
Date Fri, 10 Oct 2014 13:57:45 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-11174?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14166868#comment-14166868
] 

Hudson commented on HADOOP-11174:
---------------------------------

FAILURE: Integrated in Hadoop-Hdfs-trunk #1897 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk/1897/])
HADOOP-11174. Delegation token for KMS should only be got once if it already exists. (Yi Liu
via wang) (wang: rev 8d941144952a77a714cd4368cba21b01904926e9)
* hadoop-hdfs-project/hadoop-hdfs/src/test/java/org/apache/hadoop/hdfs/TestEncryptionZones.java
* hadoop-hdfs-project/hadoop-hdfs/src/test/java/org/apache/hadoop/hdfs/TestEncryptionZonesWithKMS.java
* hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java
* hadoop-common-project/hadoop-common/CHANGES.txt


> Delegation token for KMS should only be got once if it already exists
> ---------------------------------------------------------------------
>
>                 Key: HADOOP-11174
>                 URL: https://issues.apache.org/jira/browse/HADOOP-11174
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: kms, security
>    Affects Versions: 2.6.0
>            Reporter: Yi Liu
>            Assignee: Yi Liu
>             Fix For: 2.6.0
>
>         Attachments: HDFS-7205.001.patch
>
>
> When submit MapReduce job in security mode, we need to collect delegation tokens (i.e.
delegation token for NameNode, KMS).
> {{addDelegationTokens}} is invoked several times, currently dt for NN is got only once
if exists.  But  dt for KMS is got every time, we should fix this.
> Running in real cluster:
> {quote}
> 14/10/08 02:30:52 INFO security.TokenCache: Got dt for hdfs://hnode1.sh.intel.com:9000;
Kind: HDFS_DELEGATION_TOKEN, Service: 10.239.47.8:9000, Ident: (HDFS_DELEGATION_TOKEN token
13 for user)
> 14/10/08 02:30:52 WARN token.Token: Cannot find class for token kind kms-dt
> 14/10/08 02:30:52 INFO security.TokenCache: Got dt for hdfs://hnode1.sh.intel.com:9000;
Kind: kms-dt, Service: 10.239.47.8:16000, Ident: 00 04 75 73 65 72 04 79 61 72 6e 00 8a 01
48 eb e0 d2 76 8a 01 49 0f ed 56 76 06 02
> 14/10/08 02:30:53 WARN token.Token: Cannot find class for token kind kms-dt
> 14/10/08 02:30:53 INFO security.TokenCache: Got dt for hdfs://hnode1.sh.intel.com:9000;
Kind: kms-dt, Service: 10.239.47.8:16000, Ident: 00 04 75 73 65 72 04 79 61 72 6e 00 8a 01
48 eb e0 d3 85 8a 01 49 0f ed 57 85 07 02
> 14/10/08 02:30:53 WARN token.Token: Cannot find class for token kind kms-dt
> 14/10/08 02:30:53 INFO security.TokenCache: Got dt for hdfs://hnode1.sh.intel.com:9000;
Kind: kms-dt, Service: 10.239.47.8:16000, Ident: 00 04 75 73 65 72 04 79 61 72 6e 00 8a 01
48 eb e0 d3 8e 8a 01 49 0f ed 57 8e 08 02
> 14/10/08 02:30:53 WARN token.Token: Cannot find class for token kind kms-dt
> 14/10/08 02:30:53 INFO security.TokenCache: Got dt for hdfs://hnode1.sh.intel.com:9000;
Kind: kms-dt, Service: 10.239.47.8:16000, Ident: 00 04 75 73 65 72 04 79 61 72 6e 00 8a 01
48 eb e0 d4 ef 8a 01 49 0f ed 58 ef 09 02
> {quote}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message