[NIFI-7453] PutKudu kerberos issue after TGT expires

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.12.0
• Component/s: Extensions
• Assignee: Tamas Palfy
• Reporter: Tamas Palfy
• Created: 14/May/20 17:32
• Updated: 28/May/20 13:37
• Resolved: 26/May/20 16:08

Description

When PutKudu is used with kerberos authentication, it stops working when the TGT expires with the following logs/exceptions:

ERROR org.apache.nifi.processors.kudu.PutKudu: PutKudu[id=4ad63284-cb39-1c78-bd0e-c280df797039] Failed to write due to Row error for primary key="feebfe81-4ee6-4a8b-91ca-311e1c4f8749", tablet=null, server=null, status=Runtime error: cannot re-acquire authentication token after 5 attempts (Couldn't find a valid master in (HOST:PORT). Exceptions received: [org.apache.kudu.client.NonRecoverableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials])
2020-05-13 09:27:05,157 INFO org.apache.kudu.client.ConnectToCluster: Unable to connect to master HOST:PORT: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials
2020-05-13 09:27:05,159 WARN org.apache.kudu.client.AsyncKuduSession: unexpected tablet lookup failure for operation KuduRpc(method=Write, tablet=null, attempt=0, DeadlineTracker(timeout=0, elapsed=15), No traces)
org.apache.kudu.client.NonRecoverableException: cannot re-acquire authentication token after 5 attempts (Couldn't find a valid master in (HOST:PORT). Exceptions received: [org.apache.kudu.client.NonRecover
ableException: server requires authentication, but client does not have Kerberos credentials (tgt). Authentication tokens were not used because this connection will be used to acquire a new token and therefore requires primary credentials])
        at org.apache.kudu.client.AuthnTokenReacquirer$1NewAuthnTokenErrB.call(AuthnTokenReacquirer.java:158)
        at org.apache.kudu.client.AuthnTokenReacquirer$1NewAuthnTokenErrB.call(AuthnTokenReacquirer.java:141)
        at com.stumbleupon.async.Deferred.doCall(Deferred.java:1280)
        at com.stumbleupon.async.Deferred.runCallbacks(Deferred.java:1259)
        at com.stumbleupon.async.Deferred.callback(Deferred.java:1002)
        at org.apache.kudu.client.ConnectToCluster.incrementCountAndCheckExhausted(ConnectToCluster.java:246)
...

Issue Links

• links to: GitHub Pull Request #4276