You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Arun Suresh (JIRA)" <ji...@apache.org> on 2014/10/07 14:19:34 UTC

[jira] [Commented] (HADOOP-11169) Fix DelegationTokenAuthenticatedURL to pass the connection Configurator to the authenticator

    [ https://issues.apache.org/jira/browse/HADOOP-11169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14161825#comment-14161825 ] 

Arun Suresh commented on HADOOP-11169:
--------------------------------------

As reported by [~andrew.wang] :

We're hitting an issue when trying to do "hdfs fetchdt", or really any KMS DT operation. It looks very much like the truststore is not being picked up. However, "hadoop key" operations do work.

Exception is:

{noformat}
14/10/06 19:01:14 DEBUG security.UserGroupInformation: PrivilegedActionException as:systest@EXAMPLE.COM (auth:KERBEROS) cause:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
	at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
	at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
{noformat}


> Fix DelegationTokenAuthenticatedURL to pass the connection Configurator to the authenticator 
> ---------------------------------------------------------------------------------------------
>
>                 Key: HADOOP-11169
>                 URL: https://issues.apache.org/jira/browse/HADOOP-11169
>             Project: Hadoop Common
>          Issue Type: Bug
>            Reporter: Arun Suresh
>
> KMS DelegationToken operation keeps throwing "unable to find valid certification path to requested target". It looks very much like the truststore is not being picked up.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)