[HADOOP-11888] bootstrapStandby command broken in JDK1.8 with kerberos

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Duplicate
• Affects Version/s: 2.6.0
• Component/s: security

Environment

Suse 11 Sp3
java = 1.8.0_40

• Assignee: Surendra Singh Lilhore
• Reporter: Bibin Chundatt
• Created: 29/Apr/15 14:26
• Updated: 01/May/15 14:21
• Resolved: 01/May/15 14:21

Description

bootstrapStandby is failing incase of JDK1.8 with kerberos

./hdfs namenode -bootstrapStandby

Caused by: org.apache.hadoop.security.authentication.client.AuthenticationException: org.apache.hadoop.security.authentication.client.AuthenticationException: Invalid SPNEGO sequence, status code: 403
        at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.doSpnegoSequence(KerberosAuthenticator.java:335)
        at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:206)
        at org.apache.hadoop.security.authentication.client.AuthenticatedURL.openConnection(AuthenticatedURL.java:215)
        at org.apache.hadoop.hdfs.web.URLConnectionFactory.openConnection(URLConnectionFactory.java:162)
        at org.apache.hadoop.hdfs.server.namenode.TransferFsImage.doGetUrl(TransferFsImage.java:403)
        ... 16 more
Caused by: org.apache.hadoop.security.authentication.client.AuthenticationException: Invalid SPNEGO sequence, status code: 403
        at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.readToken(KerberosAuthenticator.java:370)
        at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.access$300(KerberosAuthenticator.java:55)
        at org.apache.hadoop.security.authentication.client.KerberosAuthenticator$1.run(KerberosAuthenticator.java:320)
        at org.apache.hadoop.security.authentication.client.KerberosAuthenticator$1.run(KerberosAuthenticator.java:288)
        at java.security.AccessController.doPrivileged(Native Method)
        at javax.security.auth.Subject.doAs(Subject.java:415)
        at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.doSpnegoSequence(KerberosAuthenticator.java:288)
        ... 20 more

Issue Links

• is depended upon by: HADOOP-11090 [Umbrella] Support Java 8 in Hadoop
• is duplicated by: HADOOP-11628 SPNEGO auth does not work with CNAMEs in JDK8
• is related to: HADOOP-11090 [Umbrella] Support Java 8 in Hadoop