[IMPALA-5385] Print appropriate error for failed TGT creation due to /tmp being full

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Component/s: Security
• Labels: errorhandling
• Epic Color: ghx-label-7
• Assignee: Unassigned
• Reporter: Sailesh Mukil
• Created: 30/May/17 17:47
• Updated: 23/Dec/20 21:43
• Resolved: 23/Dec/20 21:43

Description

When CS is not able to generate TGT due to lack of space, it crashes after start and the error shows up as
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
at com.sun.security.sasl.gsskerb.GssKrb5Client.evaluateChallenge(GssKrb5Client.java:212)
at org.apache.thrift.transport.TSaslClientTransport.handleSaslStartMessage(TSaslClientTransport.java:94)
at org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:253)
at org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37)

We need the error to show that /tmp is full instead of the just the absence of a TGT.

Issue Links

• duplicates: IMPALA-9359 Recover gracefully from corrupt kerberos credential cache
• is superceded by: IMPALA-5129 Use Kudu's Kinit code to avoid expensive fork