[jira] [Updated] (MESOS-3184) Scheduler driver accepts (re-)registration message while re-authentication is in progress.

["Adam B (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/MESOS-3184?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Adam B updated MESOS-3184:
--------------------------
    Labels: security  (was: )

> Scheduler driver accepts (re-)registration message while re-authentication is in progress.
> ------------------------------------------------------------------------------------------
>
>                 Key: MESOS-3184
>                 URL: https://issues.apache.org/jira/browse/MESOS-3184
>             Project: Mesos
>          Issue Type: Bug
>          Components: scheduler driver
>            Reporter: Benjamin Mahler
>            Assignee: Guangya Liu
>              Labels: security
>
> The scheduler driver currently accepts re-registered when it is re-authenticating with the master. This can occur due a race with the authentication timeout and the master sending a (re-)registration message.
> This is fairly innocuous currently, but if the subsequent re-authentication fails, the driver keeps retrying authentication, but both the master and driver continue to act as though the scheduler is registered.
> The authentication check in _(re-)registerFramework in the master doesn't provide any benefit to this, it is still a race, so this should likely be removed as well.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)