hbase-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Purtell (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HBASE-15618) Abort if security credentials become invalid
Date Fri, 08 Apr 2016 17:06:25 GMT

    [ https://issues.apache.org/jira/browse/HBASE-15618?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15232493#comment-15232493
] 

Andrew Purtell commented on HBASE-15618:
----------------------------------------

This was with 0.98, but I don't think behavior of any later version is improved. 

> Abort if security credentials become invalid
> --------------------------------------------
>
>                 Key: HBASE-15618
>                 URL: https://issues.apache.org/jira/browse/HBASE-15618
>             Project: HBase
>          Issue Type: Bug
>            Reporter: Andrew Purtell
>
> We are investigating a production incident where a bad keytab push seems to have caused
one regionsever, serving hot regions, to lose the ability to communicate with clients. After
the fact we see this server threw a steady stream of GSS initiate failed errors and lingered
in an unhealthy state for too long. HBase did not automatically take any corrective action,
like an abort of the affected process, which would have recovered service without operator
intervention. 
> Consider detecting and aborting if security credentials like the Kerberos keytab become
invalid during runtime.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message