Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-11692

Improve authentication failure WARN message to avoid user confusion

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Hadoop Flags:
      Reviewed

      Description

      Lots of the following messages appeared in NN log:

      2014-12-10 12:18:15,728 WARN SecurityLogger.org.apache.hadoop.ipc.Server: Auth failed for <ipAddress>:39838:null (DIGEST-MD5: IO error acquiring password)
      2014-12-10 12:18:15,728 INFO org.apache.hadoop.ipc.Server: Socket Reader #1 for port 8020: readAndProcess from client <ipAddress> threw exception [org.apache.hadoop.ipc.StandbyException: Operation category READ is not supported in state standby]
      ......
      SecurityLogger.org.apache.hadoop.ipc.Server: Auth failed for <ipAddress>:39843:null (DIGEST-MD5: IO error acquiring password)
      2014-12-10 12:18:15,790 INFO org.apache.hadoop.ipc.Server: Socket Reader #1 for port 8020: readAndProcess from client <ipAddress> threw exception [org.apache.hadoop.ipc.StandbyException: Operation category READ is not supported in state standby]

      The real reason of failure is the second message about StandbyException,
      However, the first message is confusing because it talks about "DIGEST-MD5: IO error acquiring password".

      Filing this jira to modify the first message to have more comprehensive information that can be obtained from getCauseForInvalidToken(e).

             try {
                saslResponse = processSaslMessage(saslMessage);
              } catch (IOException e) {
                rpcMetrics.incrAuthenticationFailures();
                // attempting user could be null
                AUDITLOG.warn(AUTH_FAILED_FOR + this.toString() + ":"
                    + attemptingUser + " (" + e.getLocalizedMessage() + ")");
                throw (IOException) getCauseForInvalidToken(e);
              }
      

        Attachments

        1. HDFS-7857.001.patch
          1 kB
          Yongjun Zhang

        Issue Links

          Activity

            People

            • Assignee:
              yzhangal Yongjun Zhang
              Reporter:
              yzhangal Yongjun Zhang

              Dates

              • Created:
                Updated:
                Resolved:

                Issue deployment