Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Date: Thu, 21 Apr 2016 22:45:13 +0000 (UTC)
From: "churro morales (JIRA)" <jira@apache.org>
To: issues@hbase.apache.org
Message-ID: <JIRA.12957268.1460135122000.2435.1461278713596@Atlassian.JIRA>
In-Reply-To: <JIRA.12957268.1460135122000@Atlassian.JIRA>
References: <JIRA.12957268.1460135122000@Atlassian.JIRA>
 <JIRA.12957268.1460135122996@arcas>
Subject: [jira] [Work started] (HBASE-15618) Abort if security credentials
 become invalid
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


     [ https://issues.apache.org/jira/browse/HBASE-15618?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Work on HBASE-15618 started by churro morales.
----------------------------------------------
> Abort if security credentials become invalid
> --------------------------------------------
>
>                 Key: HBASE-15618
>                 URL: https://issues.apache.org/jira/browse/HBASE-15618
>             Project: HBase
>          Issue Type: Bug
>            Reporter: Andrew Purtell
>            Assignee: churro morales
>
> We are investigating a production incident where a bad keytab push seems to have caused one regionsever, serving hot regions, to lose the ability to communicate with clients. After the fact we see a steady stream of GSS initiation failure messages in the logs. The affected regionserver lingered in an unhealthy state for too long. HBase did not automatically take any corrective action, like an abort of the affected process, which would have recovered service without operator intervention. 
> Consider detecting and aborting if security credentials like the Kerberos keytab become invalid during runtime.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)