hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Chris Nauroth (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-13066) UserGroupInformation.loginWithKerberos/getLoginUser is not thread-safe
Date Mon, 09 May 2016 20:26:13 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-13066?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15276966#comment-15276966

Chris Nauroth commented on HADOOP-13066:

bq. Interestingly, it sets keytabFile and keytabPrincipal statics, but not loginUser.

The prior values get restored at the end of the method, so there are no long-term side effects.
 Unfortunately, the use of global {{static}} state in UGI does make the code hard to follow.

> UserGroupInformation.loginWithKerberos/getLoginUser is not thread-safe
> ----------------------------------------------------------------------
>                 Key: HADOOP-13066
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13066
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>            Reporter: Sergey Shelukhin
> When calling loginFromKerberos, a static variable is set up with the result. If someone
logs in as a different user from a different thread, the call to getLoginUser will not return
the correct UGI.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org

View raw message