You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by ji...@apache.org on 2018/01/02 05:52:12 UTC
hadoop git commit: HADOOP-15143. NPE due to Invalid KerberosTicket in
UGI. Contributed by Mukul Kumar Singh.
Repository: hadoop
Updated Branches:
refs/heads/branch-2 e20173d55 -> cb60c05c3
HADOOP-15143. NPE due to Invalid KerberosTicket in UGI. Contributed by Mukul Kumar Singh.
Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo
Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/cb60c05c
Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/cb60c05c
Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/cb60c05c
Branch: refs/heads/branch-2
Commit: cb60c05c3aff762c39d7d81df9a7b6e071acb181
Parents: e20173d
Author: Jitendra Pandey <ji...@apache.org>
Authored: Mon Jan 1 21:51:48 2018 -0800
Committer: Jitendra Pandey <ji...@apache.org>
Committed: Mon Jan 1 21:51:48 2018 -0800
----------------------------------------------------------------------
.../java/org/apache/hadoop/security/UserGroupInformation.java | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/hadoop/blob/cb60c05c/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
----------------------------------------------------------------------
diff --git a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
index 20a23ad..2655655 100644
--- a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
+++ b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java
@@ -1174,7 +1174,10 @@ public class UserGroupInformation {
Object cred = iter.next();
if (cred instanceof KerberosTicket) {
KerberosTicket ticket = (KerberosTicket) cred;
- if (!ticket.getServer().getName().startsWith("krbtgt")) {
+ if (ticket.isDestroyed() || ticket.getServer() == null) {
+ LOG.warn("Ticket is already destroyed, remove it.");
+ iter.remove();
+ } else if (!ticket.getServer().getName().startsWith("krbtgt")) {
LOG.warn(
"The first kerberos ticket is not TGT"
+ "(the server principal is {}), remove and destroy it.",
---------------------------------------------------------------------
To unsubscribe, e-mail: common-commits-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-commits-help@hadoop.apache.org