hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Yongjun Zhang (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-7857) Improve authentication failure WARN message to avoid user confusion
Date Mon, 09 Mar 2015 04:01:38 GMT

    [ https://issues.apache.org/jira/browse/HDFS-7857?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14352509#comment-14352509
] 

Yongjun Zhang commented on HDFS-7857:
-------------------------------------

Thanks a lot [~jingzhao]!

I tried to commit and then I realize that I had to do two things: 1, make this jira HADOOP
instead of HDFS, 2, I forgot  to modify the CHANGES.txt file. So I reverted the commit. My
bad.



> Improve authentication failure WARN message to avoid user confusion
> -------------------------------------------------------------------
>
>                 Key: HDFS-7857
>                 URL: https://issues.apache.org/jira/browse/HDFS-7857
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: namenode
>            Reporter: Yongjun Zhang
>            Assignee: Yongjun Zhang
>              Labels: supportability
>         Attachments: HDFS-7857.001.patch
>
>
> Lots of the following messages appeared in NN log:
> {quote}
> 2014-12-10 12:18:15,728 WARN SecurityLogger.org.apache.hadoop.ipc.Server: Auth failed
for <ipAddress>:39838:null (DIGEST-MD5: IO error acquiring password)
> 2014-12-10 12:18:15,728 INFO org.apache.hadoop.ipc.Server: Socket Reader #1 for port
8020: readAndProcess from client <ipAddress> threw exception [org.apache.hadoop.ipc.StandbyException:
Operation category READ is not supported in state standby]
> ......
> SecurityLogger.org.apache.hadoop.ipc.Server: Auth failed for <ipAddress>:39843:null
(DIGEST-MD5: IO error acquiring password)
> 2014-12-10 12:18:15,790 INFO org.apache.hadoop.ipc.Server: Socket Reader #1 for port
8020: readAndProcess from client <ipAddress> threw exception [org.apache.hadoop.ipc.StandbyException:
Operation category READ is not supported in state standby]
> {quote}
> The real reason of failure is the second message about StandbyException,
> However, the first message is confusing because it talks about "DIGEST-MD5: IO error
acquiring password".
> Filing this jira to modify the first message to have more comprehensive information that
can be obtained from {{getCauseForInvalidToken(e)}}.
> {code}
>        try {
>           saslResponse = processSaslMessage(saslMessage);
>         } catch (IOException e) {
>           rpcMetrics.incrAuthenticationFailures();
>           // attempting user could be null
>           AUDITLOG.warn(AUTH_FAILED_FOR + this.toString() + ":"
>               + attemptingUser + " (" + e.getLocalizedMessage() + ")");
>           throw (IOException) getCauseForInvalidToken(e);
>         }
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message