[HBASE-15039] HMaster and RegionServers should try to refresh token keys from zk when facing InvalidToken

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.2.0, 1.3.0, 0.98.17, 2.0.0
• Hadoop Flags: Reviewed
• Assignee: Yong Zhang
• Reporter: Yong Zhang
• Created: 24/Dec/15 07:57
• Updated: 05/Jan/16 16:53
• Resolved: 25/Dec/15 20:55

Description

One of HMaster and RegionServers is token key master, and others are key slaves, key master will write keys to zookeeper and key slaves will read. If any disconnetion between key slaves and zookeeper, then these HMaster or RegionServers may lost new token, client which use token authentication will get InvalidToken exception.