[HADOOP-11117] UGI HadoopLoginModule doesn't catch & wrap all kerberos-related exceptions

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.5.1
• Component/s: security
• Target Version/s: 2.6.0
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 22/Sep/14 20:42
• Updated: 08/Oct/14 16:11
• Resolved: 08/Oct/14 16:11

Description

If something is failing with kerberos login, UserGroupInformation.loginUserFromKeytabAndReturnUGI() should fail with useful information. But not all exceptions from the inner code are caught and converted to LoginException. Those exceptions that aren't wrapped have their text and stack trace lost somewhere in the javax code, leaving on the text "login failed" and a stack trace of no value whatsoever.

Issue Links

• relates to: YARN-913 Umbrella: Add a way to register long-lived services in a YARN cluster