Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Blocker Blocker
    • Resolution: Fixed
    • Affects Version/s: 0.23.1, 2.0.0-alpha, 3.0.0
    • Fix Version/s: 0.23.3, 2.0.2-alpha
    • Component/s: security
    • Labels:
      None

      Description

      When DistCp is invoked through a proxy-user (e.g. through Oozie), the delegation-token-store isn't picked up by DistCp correctly. One sees failures such as:

      ERROR [main] org.apache.hadoop.tools.DistCp: Couldn't complete DistCp
      operation:
      java.lang.SecurityException: Intercepted System.exit(-999)
      at
      org.apache.oozie.action.hadoop.LauncherSecurityManager.checkExit(LauncherMapper.java:651)
      at java.lang.Runtime.exit(Runtime.java:88)
      at java.lang.System.exit(System.java:904)
      at org.apache.hadoop.tools.DistCp.main(DistCp.java:357)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at
      sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at
      sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at
      org.apache.oozie.action.hadoop.LauncherMapper.map(LauncherMapper.java:394)
      at org.apache.hadoop.mapred.MapRunner.run(MapRunner.java:54)
      at org.apache.hadoop.mapred.MapTask.runOldMapper(MapTask.java:399)
      at org.apache.hadoop.mapred.MapTask.run(MapTask.java:334)
      at org.apache.hadoop.mapred.YarnChild$2.run(YarnChild.java:147)
      at java.security.AccessController.doPrivileged(Native Method)
      at javax.security.auth.Subject.doAs(Subject.java:396)
      at
      org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1177)
      at org.apache.hadoop.mapred.YarnChild.main(YarnChild.java:142)

      Looking over the DistCp code, one sees that HADOOP_TOKEN_FILE_LOCATION isn't being copied to mapreduce.job.credentials.binary, in the job-conf. I'll post a patch for this shortly.

      1. HADOOP-8225.patch
        20 kB
        Daryn Sharp
      2. HADOOP-8225.patch
        10 kB
        Daryn Sharp
      3. HADOOP-8225.patch
        0.9 kB
        Daryn Sharp
      4. HADOOP-8225.patch
        0.8 kB
        Thomas Graves
      5. HADOOP-8225.patch
        0.8 kB
        Mithun Radhakrishnan

        Issue Links

          Activity

          Mithun Radhakrishnan created issue -
          Mithun Radhakrishnan made changes -
          Field Original Value New Value
          Attachment DistCp_HadoopTokenFileLocation.patch [ 12518235 ]
          Mithun Radhakrishnan made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Mithun Radhakrishnan made changes -
          Attachment MAPREDUCE-4004.patch [ 12519312 ]
          Attachment MAPREDUCE-4004-branch-0.23.1.patch [ 12519313 ]
          Mithun Radhakrishnan made changes -
          Attachment DistCp_HadoopTokenFileLocation.patch [ 12518235 ]
          Mithun Radhakrishnan made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Mithun Radhakrishnan made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Mithun Radhakrishnan made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Mithun Radhakrishnan made changes -
          Project Hadoop Map/Reduce [ 12310941 ] Hadoop Common [ 12310240 ]
          Key MAPREDUCE-4004 HADOOP-8225
          Affects Version/s 0.23.1 [ 12318884 ]
          Affects Version/s 0.23.1 [ 12318883 ]
          Assignee Mithun Radhakrishnan [ mithun ]
          Component/s distcp [ 12312902 ]
          Mithun Radhakrishnan made changes -
          Attachment MAPREDUCE-4004-branch-0.23.1.patch [ 12519313 ]
          Mithun Radhakrishnan made changes -
          Attachment MAPREDUCE-4004.patch [ 12519312 ]
          Mithun Radhakrishnan made changes -
          Attachment HADOOP-8225.patch [ 12520464 ]
          Attachment HADOOP-8225-branch-0.23.1.patch [ 12520465 ]
          Mithun Radhakrishnan made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Mithun Radhakrishnan made changes -
          Attachment HADOOP-8225-branch-0.23.1.patch [ 12520465 ]
          Mithun Radhakrishnan made changes -
          Attachment HADOOP-8225.patch [ 12520464 ]
          Mithun Radhakrishnan made changes -
          Attachment HADOOP-8225.patch [ 12520480 ]
          Mithun Radhakrishnan made changes -
          Status Patch Available [ 10002 ] Open [ 1 ]
          Mithun Radhakrishnan made changes -
          Status Open [ 1 ] Patch Available [ 10002 ]
          Thomas Graves made changes -
          Attachment HADOOP-8225.patch [ 12538199 ]
          Daryn Sharp made changes -
          Attachment HADOOP-8225.patch [ 12538787 ]
          Daryn Sharp made changes -
          Assignee Daryn Sharp [ daryn ]
          Daryn Sharp made changes -
          Attachment HADOOP-8225.patch [ 12542025 ]
          Daryn Sharp made changes -
          Attachment HADOOP-8225.patch [ 12542139 ]
          Daryn Sharp made changes -
          Affects Version/s 2.0.0-alpha [ 12320352 ]
          Affects Version/s 3.0.0 [ 12320357 ]
          Target Version/s 0.23.3, 3.0.0, 2.2.0-alpha [ 12320059, 12320357, 12322473 ]
          Priority Major [ 3 ] Blocker [ 1 ]
          Component/s security [ 12312526 ]
          Robert Joseph Evans made changes -
          Status Patch Available [ 10002 ] Resolved [ 5 ]
          Fix Version/s 0.23.3 [ 12320059 ]
          Fix Version/s 2.1.0-alpha [ 12321441 ]
          Fix Version/s 3.0.0 [ 12320357 ]
          Fix Version/s 2.2.0-alpha [ 12322473 ]
          Resolution Fixed [ 1 ]
          Daryn Sharp made changes -
          Link This issue breaks HADOOP-8725 [ HADOOP-8725 ]
          Aaron T. Myers made changes -
          Link This issue breaks HDFS-3852 [ HDFS-3852 ]
          Benoy Antony made changes -
          Link This issue breaks HADOOP-8726 [ HADOOP-8726 ]
          Arun C Murthy made changes -
          Fix Version/s 3.0.0 [ 12320357 ]
          Fix Version/s 2.1.0-alpha [ 12321441 ]
          Arun C Murthy made changes -
          Status Resolved [ 5 ] Closed [ 6 ]

            People

            • Assignee:
              Daryn Sharp
              Reporter:
              Mithun Radhakrishnan
            • Votes:
              0 Vote for this issue
              Watchers:
              14 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development