Uploaded image for project: 'Hive'
  1. Hive
  2. HIVE-12481

Occasionally "Request is a replay" will be thrown from HS2

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2.0.0
    • Fix Version/s: 2.1.0
    • Component/s: Authentication
    • Labels:
      None
    • Release Note:
      Added a new JDBC connection property "retries" so if any transport connection fails, JDBC client will retry for the times specified by this parameter.

      Description

      We have seen the following exception thrown from HS2 in secured cluster when many queries are running simultaneously on single HS2 instance.

      The cause I can guess is that it happens that two queries are submitted at the same time and have the same timestamp. For such case, we can add a retry for the query.

      2015-11-18 16:12:33,117 ERROR org.apache.thrift.transport.TSaslTransport: SASL negotiation failure
      javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: Failure unspecified at GSS-API level (Mechanism level: Request is a replay (34))]
      at com.sun.security.sasl.gsskerb.GssKrb5Server.evaluateResponse(GssKrb5Server.java:177)
      at org.apache.thrift.transport.TSaslTransport$SaslParticipant.evaluateChallengeOrResponse(TSaslTransport.java:539)
      at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:283)
      at org.apache.thrift.transport.TSaslServerTransport.open(TSaslServerTransport.java:41)
      at org.apache.thrift.transport.TSaslServerTransport$Factory.getTransport(TSaslServerTransport.java:216)
      at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge.java:739)
      at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssumingTransportFactory$1.run(HadoopThriftAuthBridge.java:736)
      at java.security.AccessController.doPrivileged(Native Method)
      at javax.security.auth.Subject.doAs(Subject.java:356)
      at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1651)
      at org.apache.hadoop.hive.thrift.HadoopThriftAuthBridge$Server$TUGIAssumingTransportFactory.getTransport(HadoopThriftAuthBridge.java:736)
      at org.apache.thrift.server.TThreadPoolServer$WorkerProcess.run(TThreadPoolServer.java:268)
      at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
      at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
      at java.lang.Thread.run(Thread.java:745)
      Caused by: GSSException: Failure unspecified at GSS-API level (Mechanism level: Request is a replay (34))
      at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:788)
      at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:342)
      at sun.security.jgss.GSSContextImpl.acceptSecContext(GSSContextImpl.java:285)
      at com.sun.security.sasl.gsskerb.GssKrb5Server.evaluateResponse(GssKrb5Server.java:155)
      ... 14 more
      Caused by: KrbException: Request is a replay (34)
      at sun.security.krb5.KrbApReq.authenticate(KrbApReq.java:308)
      at sun.security.krb5.KrbApReq.<init>(KrbApReq.java:144)
      at sun.security.jgss.krb5.InitSecContextToken.<init>(InitSecContextToken.java:108)
      at sun.security.jgss.krb5.Krb5Context.acceptSecContext(Krb5Context.java:771)
      ... 17 more
      

        Attachments

        1. HIVE-12481.patch
          11 kB
          Aihua Xu
        2. HIVE-12481.3.patch
          2 kB
          Aihua Xu
        3. HIVE-12481.2.patch
          11 kB
          Aihua Xu

          Issue Links

            Activity

              People

              • Assignee:
                aihuaxu Aihua Xu
                Reporter:
                aihuaxu Aihua Xu
              • Votes:
                0 Vote for this issue
                Watchers:
                8 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: