Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9125

LdapGroupsMapping threw CommunicationException after some idle time

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 0.23.3, 2.0.0-alpha
    • 2.1.0-beta
    • security
    • None
    • Reviewed

    Description

      LdapGroupsMapping threw exception as below after some idle time. During the idle time no call to the group mapping provider should be made to repeat it.

      2012-12-07 02:20:59,738 WARN org.apache.hadoop.security.LdapGroupsMapping: Exception trying to get groups for user aduser2
      javax.naming.CommunicationException: connection closed [Root exception is java.io.IOException: connection closed]; remaining name 'CN=Users,DC=EXAMPLE,DC=COM'
      at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1983)
      at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1827)
      at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1752)
      at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1769)
      at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:394)
      at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:376)
      at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358)
      at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
      at org.apache.hadoop.security.LdapGroupsMapping.getGroups(LdapGroupsMapping.java:187)
      at org.apache.hadoop.security.CompositeGroupsMapping.getGroups(CompositeGroupsMapping.java:97)
      at org.apache.hadoop.security.Groups.doGetGroups(Groups.java:103)
      at org.apache.hadoop.security.Groups.getGroups(Groups.java:70)
      at org.apache.hadoop.security.UserGroupInformation.getGroupNames(UserGroupInformation.java:1035)
      at org.apache.hadoop.hbase.security.User.getGroupNames(User.java:90)
      at org.apache.hadoop.hbase.security.access.TableAuthManager.authorize(TableAuthManager.java:355)
      at org.apache.hadoop.hbase.security.access.AccessController.requirePermission(AccessController.java:379)
      at org.apache.hadoop.hbase.security.access.AccessController.getUserPermissions(AccessController.java:1051)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at org.apache.hadoop.hbase.regionserver.HRegion.exec(HRegion.java:4914)
      at org.apache.hadoop.hbase.regionserver.HRegionServer.execCoprocessor(HRegionServer.java:3546)
      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
      at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      at java.lang.reflect.Method.invoke(Method.java:597)
      at org.apache.hadoop.hbase.ipc.SecureRpcEngine$Server.call(SecureRpcEngine.java:372)
      at org.apache.hadoop.hbase.ipc.HBaseServer$Handler.run(HBaseServer.java:1399)
      Caused by: java.io.IOException: connection closed
      at com.sun.jndi.ldap.LdapClient.ensureOpen(LdapClient.java:1558)
      at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:503)
      at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1965)
      ... 28 more
      2012-12-07 02:20:59,739 WARN org.apache.hadoop.security.UserGroupInformation: No groups available for user aduser2

      Attachments

        1. HADOOP-9125.patch
          5 kB
          Kai Zheng
        2. HADOOP-9125.patch
          10 kB
          Kai Zheng

        Issue Links

          Activity

            People

              drankye Kai Zheng
              drankye Kai Zheng
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 24h
                  24h
                  Remaining:
                  Remaining Estimate - 24h
                  24h
                  Logged:
                  Time Spent - Not Specified
                  Not Specified