Details
-
Improvement
-
Status: Open
-
Major
-
Resolution: Unresolved
-
None
-
None
-
None
-
None
Description
I've seen an issue where, after an RPC client hit an error obtaining a TGT from Kerberos, the RPC client continues to retry even though there's no chance of success (the no login window is set to 600s).
In this particular deployment, the client retries 15 times at 15s intervals, leading to a delay of more than three minutes before the failure is bubbled up to the client when the RPC ultimately fails.
Unrecoverable errors (like failures to login to Kerberos) should lead to fast aborts of the retry loop.
Attachments
Issue Links
- depends upon
-
HADOOP-13627 Have an explicit KerberosAuthException for UGI to throw, text from public constants
- Resolved
- is depended upon by
-
HADOOP-12649 Improve Kerberos diagnostics and failure handling
- Open