[HADOOP-7982] UserGroupInformation fails to login if thread's context classloader can't load HadoopLoginModule

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0, 0.23.0
• Fix Version/s: 1.1.0, 0.23.1
• Component/s: security
• Target Version/s: 1.1.0, 0.23.1
• Hadoop Flags: Reviewed
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 19/Jan/12 01:47
• Updated: 10/Mar/15 02:21
• Resolved: 20/Jan/12 03:35

Description

In a few hard-to-reproduce situations, we've seen a problem where the UGI login call causes a failure to login exception with the following cause:

Caused by: javax.security.auth.login.LoginException: unable to find
LoginModule class: org.apache.hadoop.security.UserGroupInformation
$HadoopLoginModule

After a bunch of debugging, I determined that this happens when the login occurs in a thread whose Context ClassLoader has been set to null.

Issue Links

• relates to: HIVE-2729 Hive sets thread's ContextClassLoader to null
• relates to: HIVE-2163 SquirrelSQL 3.2.1 doesn't work with Hive 0.7.0