[HADOOP-9125] LdapGroupsMapping threw CommunicationException after some idle time

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.23.3, 2.0.0-alpha
• Fix Version/s: 2.1.0-beta
• Component/s: security
• Target Version/s: 2.1.0-beta
• Hadoop Flags: Reviewed
• Assignee: Kai Zheng
• Reporter: Kai Zheng
• Created: 10/Dec/12 02:07
• Updated: 27/Aug/13 22:06
• Resolved: 27/Mar/13 21:53

Description

LdapGroupsMapping threw exception as below after some idle time. During the idle time no call to the group mapping provider should be made to repeat it.

2012-12-07 02:20:59,738 WARN org.apache.hadoop.security.LdapGroupsMapping: Exception trying to get groups for user aduser2
javax.naming.CommunicationException: connection closed [Root exception is java.io.IOException: connection closed]; remaining name 'CN=Users,DC=EXAMPLE,DC=COM'
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1983)
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1827)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1752)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1769)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:394)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:376)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
at org.apache.hadoop.security.LdapGroupsMapping.getGroups(LdapGroupsMapping.java:187)
at org.apache.hadoop.security.CompositeGroupsMapping.getGroups(CompositeGroupsMapping.java:97)
at org.apache.hadoop.security.Groups.doGetGroups(Groups.java:103)
at org.apache.hadoop.security.Groups.getGroups(Groups.java:70)
at org.apache.hadoop.security.UserGroupInformation.getGroupNames(UserGroupInformation.java:1035)
at org.apache.hadoop.hbase.security.User.getGroupNames(User.java:90)
at org.apache.hadoop.hbase.security.access.TableAuthManager.authorize(TableAuthManager.java:355)
at org.apache.hadoop.hbase.security.access.AccessController.requirePermission(AccessController.java:379)
at org.apache.hadoop.hbase.security.access.AccessController.getUserPermissions(AccessController.java:1051)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.hadoop.hbase.regionserver.HRegion.exec(HRegion.java:4914)
at org.apache.hadoop.hbase.regionserver.HRegionServer.execCoprocessor(HRegionServer.java:3546)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.hadoop.hbase.ipc.SecureRpcEngine$Server.call(SecureRpcEngine.java:372)
at org.apache.hadoop.hbase.ipc.HBaseServer$Handler.run(HBaseServer.java:1399)
Caused by: java.io.IOException: connection closed
at com.sun.jndi.ldap.LdapClient.ensureOpen(LdapClient.java:1558)
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:503)
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1965)
... 28 more
2012-12-07 02:20:59,739 WARN org.apache.hadoop.security.UserGroupInformation: No groups available for user aduser2

Issue Links

• relates to: HADOOP-8121 Active Directory Group Mapping Service