You are viewing a plain text version of this content. The canonical link for it is here.
Posted to mapreduce-issues@hadoop.apache.org by "Daryn Sharp (JIRA)" <ji...@apache.org> on 2011/08/04 02:23:27 UTC

[jira] [Updated] (MAPREDUCE-2764) Fix renewal of dfs delegation tokens

     [ https://issues.apache.org/jira/browse/MAPREDUCE-2764?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Daryn Sharp updated MAPREDUCE-2764:
-----------------------------------

    Attachment: MAPREDUCE-2764.patch

FS tokens store a uri to the fs in the service field.
Greatly simplified DelegationTokenRenewal to find the FileSystem based on token's service uri.
Tokens can be queried for authority which will use the service's uri or the raw value.
Tokens have a standard method to set the service based on InetSocketAddress instead of all token producers having a copy-n-paste...  Will greatly ease the 
Small redesign of TokenSelectors to commonize the classes, add support to search based on authority.
IPC client searches based on authority.
Fixup hftp/hftps to be a better filesystem citizen, more work may need to be done to avoid the automatic token renewal.

> Fix renewal of dfs delegation tokens
> ------------------------------------
>
>                 Key: MAPREDUCE-2764
>                 URL: https://issues.apache.org/jira/browse/MAPREDUCE-2764
>             Project: Hadoop Map/Reduce
>          Issue Type: Bug
>            Reporter: Daryn Sharp
>            Assignee: Daryn Sharp
>             Fix For: 0.20.205.0
>
>         Attachments: MAPREDUCE-2764.patch
>
>
> The JT may have issues renewing hftp tokens which disrupt long distcp jobs.  The problem is the JT's delegation token renewal code is built on brittle assumptions.  The token's service field contains only the "ip:port" pair.  The renewal process assumes that the scheme must be hdfs.  If that fails due to a {{VersionMismatchException}}, it tries https based on another assumption that it must be hftp if it's not hdfs.  A number of other exceptions, most commonly {{IOExceptions}}, can be generated which fouls up the renewal since it won't fallback to https.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira