You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Kihwal Lee (JIRA)" <ji...@apache.org> on 2016/01/08 14:53:39 UTC
[jira] [Updated] (HADOOP-12697) IPC retry policies should recognise
that SASL auth failures are unrecoverable
[ https://issues.apache.org/jira/browse/HADOOP-12697?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Kihwal Lee updated HADOOP-12697:
--------------------------------
Description:
SLIDER-1050 shows that if you don't have the right kerberos settings, the Yarn client IPC channel blocks retrying to the talk to the RM, retrying repeatedly
{noformat}
2016-01-07 02:50:45,111 [main] WARN ipc.Client - Exception encountered while connecting to the server :
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException:
No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
{noformat}
SASL exceptions need to be recognised as irreconcilable authentication failures, rather than generic IOEs that might go away if you retry
was:
SLIDER-1050 shows that if you don't have the right kerberos settings, the Yarn client IPC channel blocks retrying to the talk to the RM, retrying repeatedly
{noformat}
2016-01-07 02:50:45,111 [main] WARN ipc.Client - Exception encountered while connecting to the server :
javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
{noformat}
SASL exceptions need to be recognised as irreconcilable authentication failures, rather than generic IOEs that might go away if you retry
> IPC retry policies should recognise that SASL auth failures are unrecoverable
> -----------------------------------------------------------------------------
>
> Key: HADOOP-12697
> URL: https://issues.apache.org/jira/browse/HADOOP-12697
> Project: Hadoop Common
> Issue Type: Bug
> Components: ipc
> Affects Versions: 2.7.1
> Environment: Cluster with kerberos on and client not calling with the right credentials
> Reporter: Steve Loughran
> Priority: Minor
>
> SLIDER-1050 shows that if you don't have the right kerberos settings, the Yarn client IPC channel blocks retrying to the talk to the RM, retrying repeatedly
> {noformat}
> 2016-01-07 02:50:45,111 [main] WARN ipc.Client - Exception encountered while connecting to the server :
> javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException:
> No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
> {noformat}
> SASL exceptions need to be recognised as irreconcilable authentication failures, rather than generic IOEs that might go away if you retry
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)