Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-12649 Improve Kerberos diagnostics and failure handling
  3. HADOOP-13627

Have an explicit KerberosAuthException for UGI to throw, text from public constants

    Details

    • Target Version/s:
    • Hadoop Flags:
      Reviewed

      Description

      UGI creates simple IOEs on failure, making it impossible to catch them, ignore them, have smart retry logic around them, etc.

      1. Have an explicit exception like KerberosAuthException extends IOException to raise instead. We can't use AuthenticationException as that doesn't extend IOE.
      2. move UGI, SecurityUtil and things related off simple IOEs and into the new one
      3. review exceptions raised and consider if they can provide more information
      4. for the strings that get created, put them as public static constants, so that tests can look for them explicitly —tests that don't break if the text is changed.
      5. maybe, getUGIFromTicketCache to throw this rather than an RTE if no login principals were found (it throws IOEs on login failures, after all)
      6. keep KDiag in sync with this

        Attachments

        1. HADOOP-13627.01.patch
          10 kB
          Xiao Chen
        2. HADOOP-13627.02.patch
          14 kB
          Xiao Chen
        3. HADOOP-13627.03.patch
          15 kB
          Xiao Chen

          Issue Links

            Activity

              People

              • Assignee:
                xiaochen Xiao Chen
                Reporter:
                stevel@apache.org Steve Loughran
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: