hadoop-yarn-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Loughran (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (YARN-2677) registry punycoding of usernames doesn't fix all usernames to be DNS-valid
Date Fri, 10 Oct 2014 20:51:34 GMT

    [ https://issues.apache.org/jira/browse/YARN-2677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14167486#comment-14167486
] 

Steve Loughran commented on YARN-2677:
--------------------------------------

it also looks like somehow the full kerberos name creeps in —that needs to be name-shortened
the way UGI does
{code}
14/10/10 17:35:45 ERROR main.ServiceLauncher: Exception: `/users/hbase@HWQE.HORTONWORKS.COM/services/org-apache-slider/hbcluster24':
Invalid Path element "hbase@HWQE.HORTONWORKS.COM"
org.apache.hadoop.registry.client.exceptions.InvalidPathnameException: `/users/hbase@APACHE.ORG/services/org-apache-slider/hbcluster24':
Invalid Path element "hbase@@APACHE.ORG"
	at org.apache.hadoop.registry.client.binding.RegistryPathUtils.validateElementsAsDNS(RegistryPathUtils.java:78)
	at org.apache.hadoop.registry.client.impl.zk.RegistryOperationsService.validatePath(RegistryOperationsService.java:91)
	at org.apache.hadoop.registry.client.impl.zk.RegistryOperationsService.delete(RegistryOperationsService.java:151)
	at org.apache.slider.server.services.yarnregistry.YarnRegistryViewForProviders.putService(YarnRegistryViewForProviders.java:138)
	at org.apache.slider.server.appmaster.SliderAppMaster.registerServiceInstance(SliderAppMaster.java:1002)
	at org.apache.slider.server.appmaster.SliderAppMaster.createAndRunCluster(SliderAppMaster.java:846)
	at org.apache.slider.server.appmaster.SliderAppMaster.runService(SliderAppMaster.java:507)
{code}

> registry punycoding of usernames doesn't fix all usernames to be DNS-valid
> --------------------------------------------------------------------------
>
>                 Key: YARN-2677
>                 URL: https://issues.apache.org/jira/browse/YARN-2677
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: api, resourcemanager
>    Affects Versions: 2.6.0
>            Reporter: Steve Loughran
>            Assignee: Steve Loughran
>
> The registry has a restriction "DNS-valid names only" to retain the future option of
DNS exporting of the registry.
> to handle complex usernames, it punycodes the username first, using Java's {{java.net.IDN}}
class.
> This turns out to only map high unicode-> ASCII, and does nothing for ascii-but-invalid-hostname
chars, so stopping users with DNS-illegal names (e.g. with an underscore in them) from being
able to register



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message