Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9880

SASL changes from HADOOP-9421 breaks Secure HA NN

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 2.1.0-beta
    • 2.1.1-beta
    • None
    • None
    • Reviewed

    Description

      buildSaslNegotiateResponse() will create a SaslRpcServer with TOKEN auth. When create() is called against it, secretManager.checkAvailableForRead() is called, which fails in HA standby. Thus HA standby nodes cannot be transitioned to active.

      Attachments

        1. HADOOP-9880.patch
          4 kB
          Daryn Sharp

        Issue Links

          breaks

          Bug - A problem which impairs or prevents the functions of the product. HDFS-5124 DelegationTokenSecretManager#retrievePassword can cause deadlock in NameNode

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed
          is related to

          Sub-task - The sub-task of the issue HADOOP-9421 Convert SASL to use ProtoBuf and provide negotiation capabilities

          • Blocker - Blocks development and/or testing work, production could not run
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. HDFS-3083 Cannot run an MR job with HA and security enabled when second-listed NN active

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Activity

            People

              daryn Daryn Sharp
              kihwal Kihwal Lee
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: