Return-Path: X-Original-To: apmail-hadoop-hdfs-dev-archive@minotaur.apache.org Delivered-To: apmail-hadoop-hdfs-dev-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id BDF391813C for ; Tue, 13 Oct 2015 17:04:38 +0000 (UTC) Received: (qmail 48533 invoked by uid 500); 13 Oct 2015 17:04:37 -0000 Delivered-To: apmail-hadoop-hdfs-dev-archive@hadoop.apache.org Received: (qmail 48365 invoked by uid 500); 13 Oct 2015 17:04:37 -0000 Mailing-List: contact hdfs-dev-help@hadoop.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: hdfs-dev@hadoop.apache.org Delivered-To: mailing list hdfs-dev@hadoop.apache.org Received: (qmail 48348 invoked by uid 99); 13 Oct 2015 17:04:36 -0000 Received: from Unknown (HELO spamd1-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Oct 2015 17:04:36 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd1-us-west.apache.org (ASF Mail Server at spamd1-us-west.apache.org) with ESMTP id 439B3C3B80 for ; Tue, 13 Oct 2015 17:04:36 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd1-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -15.1 X-Spam-Level: X-Spam-Status: No, score=-15.1 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_WHITELIST=-15] autolearn=disabled Authentication-Results: spamd1-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=yahoo-inc.com header.b=GfXTQVro; dkim=pass (1024-bit key) header.d=yahoo-inc.com header.b=MOtxz/3P Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd1-us-west.apache.org [10.40.0.7]) (amavisd-new, port 10024) with ESMTP id D_aCH93e9xCc for ; Tue, 13 Oct 2015 17:04:25 +0000 (UTC) Received: from mrout1.yahoo.com (mrout1.yahoo.com [216.145.54.171]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with ESMTPS id C0FD32164F for ; Tue, 13 Oct 2015 17:04:24 +0000 (UTC) Received: from omp1022.mail.ne1.yahoo.com (omp1022.mail.ne1.yahoo.com [98.138.89.166]) by mrout1.yahoo.com (8.14.4/8.14.4/y.out) with ESMTP id t9DH3HA4058189 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Tue, 13 Oct 2015 10:03:17 -0700 (PDT) Received: (qmail 98057 invoked by uid 1000); 13 Oct 2015 17:03:17 -0000 X-YMail-OSG: R4sjjTEVM1kTHbQimxtXImT9qkUKmiOwf_jGNn7VlY_6cGZLcbwx_OFRoC.67l3 z2_xtKYY7hg_wrKh0DXz.jZByLLalESdpEmTzCvG90c3N1jf0A9pOdrwy1zQixUTEiNponcsX_qC LZEh9nv1CpCpYJBeh_jEpthiOCZsx3ogY3MDf.mnEvNdqimpg.IA_o.ng9RPrUWoNbyNksxcp4fa aLbGseZlzWKB1KnYIOD1W7ehxY33JPZOizKt.xw-- Received: by 98.138.101.166; Tue, 13 Oct 2015 17:03:16 +0000 Date: Tue, 13 Oct 2015 17:02:49 +0000 (UTC) From: Kihwal Lee Reply-To: Kihwal Lee To: "dev@hbase.apache.org" , "common-dev@hadoop.apache.org" Cc: "mapreduce-dev@hadoop.apache.org" , "hdfs-dev@hadoop.apache.org" , "yarn-dev@hadoop.apache.org" Message-ID: <1661167.3251351.1444755769254.JavaMail.yahoo@mail.yahoo.com> In-Reply-To: References: <5614BBC3.7@oss.nttdata.co.jp> <436A8BC6-4B9E-4567-A26B-5DC73CFE0A3E@hortonworks.com> Subject: Re: [DISCUSS] About the details of JDK-8 support MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit sun.security.krb5.KrbApReq was creating a static MD5 digest object and not synchronizing access. This has been fixed in jdk8u60. http://hg.openjdk.java.net/jdk8u/jdk8u60/jdk/rev/02d6b1096e89 One of the visible symptom is RPC reader thread getting ArrayIndexOutOfBoundsException from sun.security.provider.DigestBase.engineUpdate. More concerning case is a reader operating on a wrong digest. Kihwal ________________________________ From: Jean-Baptiste Note To: common-dev@hadoop.apache.org Cc: "mapreduce-dev@hadoop.apache.org" ; "hdfs-dev@hadoop.apache.org" ; dev ; "yarn-dev@hadoop.apache.org" Sent: Tuesday, October 13, 2015 5:00 AM Subject: Re: [DISCUSS] About the details of JDK-8 support Hi, As far as security is concerned we (Criteo) are using CDH5 with JDK8 in production with security enabled. We reported some gripes with some specific java versions: https://issues.cloudera.org/browse/DISTRO-732 I would bump the dependency to _u51 or later; _u40 _u45 do have a lot of problems with SPNEGO SSO. JB