[HADOOP-12587] Hadoop AuthToken refuses to work without a maxinactive attribute in issued token

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.8.0
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: security

Environment

OSX heimdal kerberos client against Linux KDC -talking to a Hadoop 2.6.0 cluster

• Target Version/s: 2.8.0
• Assignee: Benoy Antony
• Reporter: Steve Loughran
• Created: 19/Nov/15 14:53
• Updated: 30/Aug/16 01:21
• Resolved: 09/Jan/16 21:49

Description

If you don't have a max-inactive attribute in the auth token returned from the web site, AuthToken will raise an exception. This stops callers without this token being able to submit jobs to a secure Hadoop 2.6 YARN cluster with timeline server enabled.

Issue Links

• is broken by: HADOOP-12050 Enable MaxInactiveInterval for hadoop http auth token