You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@tez.apache.org by "Bikas Saha (JIRA)" <ji...@apache.org> on 2014/09/23 07:29:34 UTC
[jira] [Reopened] (TEZ-1433) Invalid credentials can be used when a
DAG is submitted to a session which has timed out
[ https://issues.apache.org/jira/browse/TEZ-1433?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bikas Saha reopened TEZ-1433:
-----------------------------
> Invalid credentials can be used when a DAG is submitted to a session which has timed out
> ----------------------------------------------------------------------------------------
>
> Key: TEZ-1433
> URL: https://issues.apache.org/jira/browse/TEZ-1433
> Project: Apache Tez
> Issue Type: Bug
> Affects Versions: 0.4.0
> Reporter: Siddharth Seth
> Assignee: Bikas Saha
> Priority: Blocker
> Fix For: 0.5.1
>
> Attachments: TEZ-1433-v1.patch, TEZ-1433.2.patch, TEZ-1433.3.patch, TEZ-1433.4.patch, TEZ-1433.5.patch
>
>
> When a DAG is submitted to a session which has timed out, and the same DAG is then submitted to a new session - credentials associated with the old session can end up getting used.
> Before we know that the session is no longer valid, the DAG is modified to add local resources and credentials.
> On the next submission, since the DAG already has tokens (for HDFS for example) from the old session, the tokens are not updated.
> Meanwhile, the old token would end up being cancelled by the RM - since the applicaiton associated with the previous session has finished.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)