[HDFS-2579] Starting delegation token manager during safemode fails

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: HA branch (HDFS-1623)
• Fix Version/s: HA branch (HDFS-1623)
• Component/s: ha, namenode, security
• Target Version/s: HA branch (HDFS-1623)
• Hadoop Flags: Reviewed
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 21/Nov/11 21:04
• Updated: 12/Apr/13 13:58
• Resolved: 09/Feb/12 06:12

Description

I noticed this on the HA branch, but it seems to actually affect non-HA branch 0.23 if security is enabled. When the NN starts up, if security is enabled, we start the delegation token secret manager, which then tries to call logUpdateMasterKey. This fails because the edit logs may not be written while in safe-mode.

It seems to me that there's not any necessary reason that you have to make a new master key at startup, since you've loaded the old key when you load the FSImage. You'd only be lacking a DT master key on a fresh cluster, in which case we could have it generate one at format time.

Issue Links

• is related to: HDFS-2577 HA: NN fails to start since it tries to start secret manager in safemode
• is related to: HDFS-4466 Remove the deadlock from AbstractDelegationTokenSecretManager
• relates to: HDFS-4690 Namenode exits if entering safemode while secret manager is edit logging