Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-12697

IPC retry policies should recognise that SASL auth failures are unrecoverable

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: 2.7.1
    • Fix Version/s: None
    • Component/s: ipc
    • Labels:
      None
    • Environment:

      Cluster with kerberos on and client not calling with the right credentials

      Description

      SLIDER-1050 shows that if you don't have the right kerberos settings, the Yarn client IPC channel blocks retrying to the talk to the RM, retrying repeatedly

      2016-01-07 02:50:45,111 [main] WARN  ipc.Client - Exception encountered while connecting to the server :
       javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException:
       No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
      

      SASL exceptions need to be recognised as irreconcilable authentication failures, rather than generic IOEs that might go away if you retry

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                stevel@apache.org Steve Loughran
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: