hadoop-hdfs-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kihwal Lee <kih...@yahoo-inc.com.INVALID>
Subject Re: [DISCUSS] About the details of JDK-8 support
Date Tue, 13 Oct 2015 17:02:49 GMT
sun.security.krb5.KrbApReq was creating a static MD5 digest object and not synchronizing access.
This has been fixed in jdk8u60. 


One of the visible symptom is RPC reader thread getting ArrayIndexOutOfBoundsException from

sun.security.provider.DigestBase.engineUpdate. More concerning case is a reader operating
on a wrong digest.


From: Jean-Baptiste Note <jbnote@gmail.com>
To: common-dev@hadoop.apache.org 
Cc: "mapreduce-dev@hadoop.apache.org" <mapreduce-dev@hadoop.apache.org>; "hdfs-dev@hadoop.apache.org"
<hdfs-dev@hadoop.apache.org>; dev <dev@hbase.apache.org>; "yarn-dev@hadoop.apache.org"
Sent: Tuesday, October 13, 2015 5:00 AM
Subject: Re: [DISCUSS] About the details of JDK-8 support


As far as security is concerned we (Criteo) are using CDH5 with JDK8 in
production with security enabled.
We reported some gripes with some specific java versions:

I would bump the dependency to _u51 or later; _u40 _u45 do have a lot of
problems with SPNEGO SSO.


View raw message