hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-11692) Improve authentication failure WARN message to avoid user confusion
Date Tue, 10 Mar 2015 14:43:44 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-11692?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14354988#comment-14354988
] 

Hudson commented on HADOOP-11692:
---------------------------------

FAILURE: Integrated in Hadoop-Hdfs-trunk #2060 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk/2060/])
HADOOP-11692. Improve authentication failure WARN message to avoid user confusion. Contributed
by Yongjun Zhang. (yzhang: rev de1101cb5be2d8efd0ef4945f64ccfe7cbd01049)
* hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java
* hadoop-common-project/hadoop-common/CHANGES.txt


> Improve authentication failure WARN message to avoid user confusion
> -------------------------------------------------------------------
>
>                 Key: HADOOP-11692
>                 URL: https://issues.apache.org/jira/browse/HADOOP-11692
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: ipc
>            Reporter: Yongjun Zhang
>            Assignee: Yongjun Zhang
>              Labels: supportability
>             Fix For: 2.8.0
>
>         Attachments: HDFS-7857.001.patch
>
>
> Lots of the following messages appeared in NN log:
> {quote}
> 2014-12-10 12:18:15,728 WARN SecurityLogger.org.apache.hadoop.ipc.Server: Auth failed
for <ipAddress>:39838:null (DIGEST-MD5: IO error acquiring password)
> 2014-12-10 12:18:15,728 INFO org.apache.hadoop.ipc.Server: Socket Reader #1 for port
8020: readAndProcess from client <ipAddress> threw exception [org.apache.hadoop.ipc.StandbyException:
Operation category READ is not supported in state standby]
> ......
> SecurityLogger.org.apache.hadoop.ipc.Server: Auth failed for <ipAddress>:39843:null
(DIGEST-MD5: IO error acquiring password)
> 2014-12-10 12:18:15,790 INFO org.apache.hadoop.ipc.Server: Socket Reader #1 for port
8020: readAndProcess from client <ipAddress> threw exception [org.apache.hadoop.ipc.StandbyException:
Operation category READ is not supported in state standby]
> {quote}
> The real reason of failure is the second message about StandbyException,
> However, the first message is confusing because it talks about "DIGEST-MD5: IO error
acquiring password".
> Filing this jira to modify the first message to have more comprehensive information that
can be obtained from {{getCauseForInvalidToken(e)}}.
> {code}
>        try {
>           saslResponse = processSaslMessage(saslMessage);
>         } catch (IOException e) {
>           rpcMetrics.incrAuthenticationFailures();
>           // attempting user could be null
>           AUDITLOG.warn(AUTH_FAILED_FOR + this.toString() + ":"
>               + attemptingUser + " (" + e.getLocalizedMessage() + ")");
>           throw (IOException) getCauseForInvalidToken(e);
>         }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message