Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Blocker Blocker
    • Resolution: Fixed
    • Affects Version/s: 0.23.1, 2.0.0-alpha, 3.0.0
    • Fix Version/s: 0.23.3, 2.0.2-alpha
    • Component/s: security
    • Labels:
      None

      Description

      When DistCp is invoked through a proxy-user (e.g. through Oozie), the delegation-token-store isn't picked up by DistCp correctly. One sees failures such as:

      ERROR [main] org.apache.hadoop.tools.DistCp: Couldn't complete DistCp
      operation:
      java.lang.SecurityException: Intercepted System.exit(-999)
      at
      org.apache.oozie.action.hadoop.LauncherSecurityManager.checkExit(LauncherMapper.java:651)
      at java.lang.Runtime.exit(Runtime.java:88)
      at java.lang.System.exit(System.java:904)
      at org.apache.hadoop.tools.DistCp.main(DistCp.java:357)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at
      sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at
      sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at
      org.apache.oozie.action.hadoop.LauncherMapper.map(LauncherMapper.java:394)
      at org.apache.hadoop.mapred.MapRunner.run(MapRunner.java:54)
      at org.apache.hadoop.mapred.MapTask.runOldMapper(MapTask.java:399)
      at org.apache.hadoop.mapred.MapTask.run(MapTask.java:334)
      at org.apache.hadoop.mapred.YarnChild$2.run(YarnChild.java:147)
      at java.security.AccessController.doPrivileged(Native Method)
      at javax.security.auth.Subject.doAs(Subject.java:396)
      at
      org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1177)
      at org.apache.hadoop.mapred.YarnChild.main(YarnChild.java:142)

      Looking over the DistCp code, one sees that HADOOP_TOKEN_FILE_LOCATION isn't being copied to mapreduce.job.credentials.binary, in the job-conf. I'll post a patch for this shortly.

      1. HADOOP-8225.patch
        20 kB
        Daryn Sharp
      2. HADOOP-8225.patch
        10 kB
        Daryn Sharp
      3. HADOOP-8225.patch
        0.9 kB
        Daryn Sharp
      4. HADOOP-8225.patch
        0.8 kB
        Thomas Graves
      5. HADOOP-8225.patch
        0.8 kB
        Mithun Radhakrishnan

        Issue Links

          Activity

          No work has yet been logged on this issue.

            People

            • Assignee:
              Daryn Sharp
              Reporter:
              Mithun Radhakrishnan
            • Votes:
              0 Vote for this issue
              Watchers:
              14 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development