[jira] [Resolved] (HADOOP-15597) UserGroupInformation class throws NPE when Kerberos TGT expired

["Eric Yang (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/HADOOP-15597?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Eric Yang resolved HADOOP-15597.
--------------------------------
    Resolution: Duplicate

> UserGroupInformation class throws NPE when Kerberos TGT expired
> ---------------------------------------------------------------
>
>                 Key: HADOOP-15597
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15597
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.9.0, 3.0.0, 3.1.0, 2.9.1, 3.0.1, 3.0.2, 2.9.2
>            Reporter: Eric Yang
>            Priority: Critical
>
> UserGroupInformation class throws NPE RuntimeException when tgt renewer can not determine expiration time:
> {code}
> Thread Thread[TGT Renewer for rm/host1.example.com@EXAMPLE.COM,5,main] threw an Exception.
> java.lang.NullPointerException
>         at javax.security.auth.kerberos.KerberosTicket.getEndTime(KerberosTicket.java:482)
>         at org.apache.hadoop.security.UserGroupInformation$1.run(UserGroupInformation.java:894)
>         at java.lang.Thread.run(Thread.java:745)
> {code}
> The error occurs when Hadoop daemon processes uses UGI class to do service tgt renewal.  The code is written that reattachMetrics() must be called by the main program to initialize UGI metrics.  Metrics initialization is only called by resource manager.  Other Hadoop processes do not call reattachMetrics().  The runtime exception could cause interruption to Hadoop services as observed in YARN RegistryDNS (YARN-8514).  It would be nice if metrics initialization happens in UGI class without reliance on Hadoop program to make UGI metrics initialization.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-dev-help@hadoop.apache.org