You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Wei-Chiu Chuang (JIRA)" <ji...@apache.org> on 2016/03/17 15:02:33 UTC

[jira] [Commented] (HADOOP-12785) [Handling exceptions] LdapGroupsMapping.getGroups() do not provide information about root cause

    [ https://issues.apache.org/jira/browse/HADOOP-12785?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15199568#comment-15199568 ] 

Wei-Chiu Chuang commented on HADOOP-12785:
------------------------------------------

[~mukhadin], would you mind if I work on this and provide a patch?
I've been debugging LDAP group mapping issues and have some understanding of the error messages.

> [Handling exceptions] LdapGroupsMapping.getGroups() do not provide information about root cause
> -----------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-12785
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12785
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.7.1
>         Environment: _Operating system_: CentOS Linux 7 {color:gray}(7.1.1503){color}
> _Platform_: HDP 2.3.4.0, Ambari 2.1.2
>            Reporter: Mukhadin Buzdov
>            Priority: Minor
>              Labels: easyfix
>
> _CommunicationException_ and _NamingException_ are not logged in _LdapGroupsMapping.getGroups()_.
> {code:title=LdapGroupsMapping.java|borderStyle=solid}
>   public synchronized List<String> getGroups(String user) throws IOException {
>     List<String> emptyResults = new ArrayList<String>();
>     // ...
>     try {
>       return doGetGroups(user);
>     } catch (CommunicationException e) {
>       LOG.warn("Connection is closed, will try to reconnect");
>     } catch (NamingException e) {
>       LOG.warn("Exception trying to get groups for user " + user + ": " + e.getMessage());
>       return emptyResults;
>     }
>     //...
>     return emptyResults;
>   }
> {code}
> {color:red}It is not possible to understand _LDAP_ level failures.{color}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)