You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@spark.apache.org by "Sean Owen (Jira)" <ji...@apache.org> on 2019/09/20 14:17:00 UTC

[jira] [Updated] (SPARK-29082) Spark driver cannot start with only delegation tokens

     [ https://issues.apache.org/jira/browse/SPARK-29082?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Sean Owen updated SPARK-29082:
------------------------------
    Fix Version/s:     (was: 3.0.0)

> Spark driver cannot start with only delegation tokens
> -----------------------------------------------------
>
>                 Key: SPARK-29082
>                 URL: https://issues.apache.org/jira/browse/SPARK-29082
>             Project: Spark
>          Issue Type: Bug
>          Components: Spark Core
>    Affects Versions: 3.0.0
>            Reporter: Marcelo Vanzin
>            Assignee: Marcelo Vanzin
>            Priority: Major
>
> If you start a Spark application with just delegation tokens, it fails. For example, from an Oozie launch, you see things like this (line numbers may be different):
> {noformat}
> No child hadoop job is executed.
> java.lang.reflect.InvocationTargetException
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
>         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.apache.oozie.action.hadoop.LauncherAM.runActionMain(LauncherAM.java:410)
>         at org.apache.oozie.action.hadoop.LauncherAM.access$300(LauncherAM.java:55)
>         at org.apache.oozie.action.hadoop.LauncherAM$2.run(LauncherAM.java:223)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAs(Subject.java:422)
>         at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1730)
>         at org.apache.oozie.action.hadoop.LauncherAM.run(LauncherAM.java:217)
>         at org.apache.oozie.action.hadoop.LauncherAM$1.run(LauncherAM.java:153)
>         at java.security.AccessController.doPrivileged(Native Method)
>         at javax.security.auth.Subject.doAs(Subject.java:422)
>         at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1730)
>         at org.apache.oozie.action.hadoop.LauncherAM.main(LauncherAM.java:141)
> Caused by: org.apache.hadoop.security.KerberosAuthException: failure to login: for principal: hrt_qa javax.security.auth.login.LoginException: Unable to obtain password from user
>         at org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:1847)
>         at org.apache.hadoop.security.UserGroupInformation.getUGIFromTicketCache(UserGroupInformation.java:616)
>         at org.apache.spark.deploy.security.HadoopDelegationTokenManager.doLogin(HadoopDelegationTokenManager.scala:276)
>         at org.apache.spark.deploy.security.HadoopDelegationTokenManager.obtainDelegationTokens(HadoopDelegationTokenManager.scala:140)
>         at org.apache.spark.deploy.yarn.Client.setupSecurityToken(Client.scala:305)
>         at org.apache.spark.deploy.yarn.Client.createContainerLaunchContext(Client.scala:1057)
>         at org.apache.spark.deploy.yarn.Client.submitApplication(Client.scala:179)
>         at org.apache.spark.deploy.yarn.Client.run(Client.scala:1178)
>         at org.apache.spark.deploy.yarn.YarnClusterApplication.start(Client.scala:1584)
>         at org.apache.spark.deploy.SparkSubmit.org$apache$spark$deploy$SparkSubmit$$runMain(SparkSubmit.scala:860)
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@spark.apache.org
For additional commands, e-mail: issues-help@spark.apache.org