You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-commits@hadoop.apache.org by zh...@apache.org on 2016/03/19 01:49:32 UTC

hadoop git commit: HADOOP-12559. KMS connection failures should trigger TGT renewal. Contributed by Zhe Zhang.

Repository: hadoop
Updated Branches:
  refs/heads/branch-2.7 f0c278469 -> c6f68a7f9


HADOOP-12559. KMS connection failures should trigger TGT renewal. Contributed by Zhe Zhang.

Conflicts:
	hadoop-common-project/hadoop-common/CHANGES.txt


Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo
Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/c6f68a7f
Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/c6f68a7f
Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/c6f68a7f

Branch: refs/heads/branch-2.7
Commit: c6f68a7f98c35bef3a9cf4c71f19c249612618e9
Parents: f0c2784
Author: Xiaoyu Yao <xy...@apache.org>
Authored: Mon Dec 28 10:41:26 2015 -0800
Committer: Zhe Zhang <ze...@zezhang-ld1.linkedin.biz>
Committed: Fri Mar 18 17:48:56 2016 -0700

----------------------------------------------------------------------
 .../java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java   | 2 ++
 1 file changed, 2 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/hadoop/blob/c6f68a7f/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java
----------------------------------------------------------------------
diff --git a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java
index 149424f..ea50d21 100644
--- a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java
+++ b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java
@@ -474,6 +474,8 @@ public class KMSClientProvider extends KeyProvider implements CryptoExtension,
           UserGroupInformation.AuthenticationMethod.PROXY)
                               ? currentUgi.getShortUserName() : null;
 
+      // check and renew TGT to handle potential expiration
+      actualUgi.checkTGTAndReloginFromKeytab();
       // creating the HTTP connection using the current UGI at constructor time
       conn = actualUgi.doAs(new PrivilegedExceptionAction<HttpURLConnection>() {
         @Override