You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Todd Lipcon (JIRA)" <ji...@apache.org> on 2011/03/14 21:57:30 UTC
[jira] Created: (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Add ability to enable 'debug' property in JAAS configuration
------------------------------------------------------------
Key: HADOOP-7189
URL: https://issues.apache.org/jira/browse/HADOOP-7189
Project: Hadoop Common
Issue Type: Improvement
Components: security
Affects Versions: 0.23.0
Reporter: Todd Lipcon
Priority: Minor
Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Todd Lipcon (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032144#comment-13032144 ]
Todd Lipcon commented on HADOOP-7189:
-------------------------------------
+1 for Ted's patch. Unfortunately I wasn't able to use the test that Andrew contributed, since this feature happens in a static initialization block and depends on an env var. I manually tested by running the UGI class from the command line with and without the env var set to "true".
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Ted Yu (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ted Yu updated HADOOP-7189:
---------------------------
Attachment: HADOOP-7189.txt
Changed the name of environment variable according to Todd's suggestion.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Ted Yu (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ted Yu updated HADOOP-7189:
---------------------------
Attachment: HADOOP-7189.txt
This patch is based on Todd's patch.
Introduced an environment variable to control the addition of debug option.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Andrew Whang (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Whang updated HADOOP-7189:
---------------------------------
Attachment: HADOOP-7189.patch
identical to HADOOP-7189.txt, but with test case
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Hudson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032164#comment-13032164 ]
Hudson commented on HADOOP-7189:
--------------------------------
Integrated in Hadoop-Common-trunk-Commit #593 (See [https://builds.apache.org/hudson/job/Hadoop-Common-trunk-Commit/593/])
HADOOP-7189. Add ability to enable debug property in JAAS configuration. Contributed by Ted Yu.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Hudson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032404#comment-13032404 ]
Hudson commented on HADOOP-7189:
--------------------------------
Integrated in Hadoop-Common-trunk #686 (See [https://builds.apache.org/hudson/job/Hadoop-Common-trunk/686/])
HADOOP-7189. Add ability to enable debug property in JAAS configuration. Contributed by Ted Yu.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Todd Lipcon (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Todd Lipcon updated HADOOP-7189:
--------------------------------
Fix Version/s: 0.22.0
Oops, sorry about the fix version. I did check the UGI tests locally before committing - sorry I didn't mention this.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Fix For: 0.22.0
>
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Todd Lipcon (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Todd Lipcon updated HADOOP-7189:
--------------------------------
Attachment: enable-UGI-debug-example.txt
this isn't a patch meant to actually be committed - but just shows the debug setting I'm talking about. This should be made conditional by a Java property or env var.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Priority: Minor
> Attachments: enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Hudson (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13034648#comment-13034648 ]
Hudson commented on HADOOP-7189:
--------------------------------
Integrated in Hadoop-Common-22-branch #49 (See [https://builds.apache.org/hudson/job/Hadoop-Common-22-branch/49/])
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Fix For: 0.22.0
>
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Tsz Wo (Nicholas), SZE (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032486#comment-13032486 ]
Tsz Wo (Nicholas), SZE commented on HADOOP-7189:
------------------------------------------------
Forgot to run tests and set fix versions?
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Commented: (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Allen Wittenauer (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13006635#comment-13006635 ]
Allen Wittenauer commented on HADOOP-7189:
------------------------------------------
I agree. This definitely looks like something that should get reformulated so that we could set it for debugging without rebuilding and/or (even worse) restarting the service.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Priority: Minor
> Attachments: enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Assigned] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Ted Yu (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ted Yu reassigned HADOOP-7189:
------------------------------
Assignee: Ted Yu
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Ted Yu (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ted Yu updated HADOOP-7189:
---------------------------
Attachment: (was: HADOOP-7189.txt)
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Todd Lipcon (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13032067#comment-13032067 ]
Todd Lipcon commented on HADOOP-7189:
-------------------------------------
Looks good, though I would suggest using HADOOP_JAAS_DEBUG as the environment variable. Our convention is that env vars are ALL_CAPITAL_LETTERS, reserving dot.separated.words for conf options.
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.23.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Todd Lipcon (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Todd Lipcon updated HADOOP-7189:
--------------------------------
Affects Version/s: (was: 0.23.0)
0.22.0
Hadoop Flags: [Reviewed]
Status: Patch Available (was: Open)
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-7189) Add ability to enable 'debug'
property in JAAS configuration
Posted by "Todd Lipcon (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-7189?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Todd Lipcon updated HADOOP-7189:
--------------------------------
Resolution: Fixed
Status: Resolved (was: Patch Available)
Committed to 22 and trunk. Thanks, Ted!
> Add ability to enable 'debug' property in JAAS configuration
> ------------------------------------------------------------
>
> Key: HADOOP-7189
> URL: https://issues.apache.org/jira/browse/HADOOP-7189
> Project: Hadoop Common
> Issue Type: Improvement
> Components: security
> Affects Versions: 0.22.0
> Reporter: Todd Lipcon
> Assignee: Ted Yu
> Priority: Minor
> Labels: newbie
> Attachments: HADOOP-7189.patch, HADOOP-7189.txt, enable-UGI-debug-example.txt
>
>
> Occasionally users have run into weird "Unable to login" messages. Unfortunately, JAAS obscures the underlying exception message in many cases because it thinks leaking the exception might be insecure in itself. Enabling the "debug" option in the JAAS configuration gets it to dump the underlying issue and makes troubleshooting this kind of issue easier.
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira