[HADOOP-13590] Retry until TGT expires even if the UGI renewal thread encountered exception

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.0, 2.7.3, 2.6.4
• Fix Version/s: 2.8.0, 3.0.0-alpha2
• Component/s: security
• Target Version/s: 2.8.0
• Hadoop Flags: Reviewed
• Assignee: Xiao Chen
• Reporter: Xiao Chen
• Created: 10/Sep/16 00:31
• Updated: 09/Jul/18 22:43
• Resolved: 09/Nov/16 17:11

Description

The UGI has a background thread to renew the tgt. On exception, it terminates itself

If something temporarily goes wrong that results in an IOE, even if it recovered no renewal will be done and client will eventually fail to authenticate. We should retry with our best effort, until tgt expires, in the hope that the error recovers before that.

Issue Links

• causes: HADOOP-15593 UserGroupInformation TGT renewer throws NPE
• is broken by: HADOOP-13986 UGI.UgiMetrics.renewalFailureTotal is not printable
• is related to: HADOOP-12649 Improve Kerberos diagnostics and failure handling