-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 2.8.0, 2.7.3, 2.6.5, 3.0.0-alpha1
-
Component/s: None
-
Labels:None
-
Environment:
Jenkins
-
Target Version/s:
-
Hadoop Flags:Reviewed
Error Message loginUserFromKeyTab must be done first Stacktrace java.io.IOException: loginUserFromKeyTab must be done first at org.apache.hadoop.security.UserGroupInformation.reloginFromKeytab(UserGroupInformation.java:1029) at org.apache.hadoop.security.UserGroupInformation.checkTGTAndReloginFromKeytab(UserGroupInformation.java:994) at org.apache.hadoop.crypto.key.kms.KMSClientProvider.createConnection(KMSClientProvider.java:478) at org.apache.hadoop.crypto.key.kms.KMSClientProvider.createKeyInternal(KMSClientProvider.java:679) at org.apache.hadoop.crypto.key.kms.KMSClientProvider.createKey(KMSClientProvider.java:697) at org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientProvider$10.call(LoadBalancingKMSClientProvider.java:259) at org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientProvider$10.call(LoadBalancingKMSClientProvider.java:256) at org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientProvider.doOp(LoadBalancingKMSClientProvider.java:94) at org.apache.hadoop.crypto.key.kms.LoadBalancingKMSClientProvider.createKey(LoadBalancingKMSClientProvider.java:256) at org.apache.hadoop.crypto.key.kms.server.TestKMS$6$1.run(TestKMS.java:1003) at org.apache.hadoop.crypto.key.kms.server.TestKMS$6$1.run(TestKMS.java:1000) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.Subject.doAs(Subject.java:415) at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1669) at org.apache.hadoop.crypto.key.kms.server.TestKMS.doAs(TestKMS.java:266) at org.apache.hadoop.crypto.key.kms.server.TestKMS.access$100(TestKMS.java:75)
Seems to be introduced by HADOOP-12559
- is related to
-
HADOOP-12559 KMS connection failures should trigger TGT renewal
-
- Closed
-