[jira] [Created] (HADOOP-15597) UserGroupInformation class throws NPE when Kerberos TGT expired

["Eric Yang (JIRA)" <ji...@apache.org>]

Eric Yang created HADOOP-15597:
----------------------------------

             Summary: UserGroupInformation class throws NPE when Kerberos TGT expired
                 Key: HADOOP-15597
                 URL: https://issues.apache.org/jira/browse/HADOOP-15597
             Project: Hadoop Common
          Issue Type: Bug
          Components: security
    Affects Versions: 3.0.2, 3.0.1, 2.9.1, 3.1.0, 3.0.0, 2.9.0, 2.9.2
            Reporter: Eric Yang


UserGroupInformation class throws NPE RuntimeException when tgt renewer can not determine expiration time:

{code}
Thread Thread[TGT Renewer for rm/host1.example.com@EXAMPLE.COM,5,main] threw an Exception.

java.lang.NullPointerException
        at javax.security.auth.kerberos.KerberosTicket.getEndTime(KerberosTicket.java:482)
        at org.apache.hadoop.security.UserGroupInformation$1.run(UserGroupInformation.java:894)
        at java.lang.Thread.run(Thread.java:745)
{code}

The error occurs when Hadoop daemon processes uses UGI class to do service tgt renewal.  The code is written that reattachMetrics() must be called by the main program to initialize UGI metrics.  Metrics initialization is only called by resource manager.  Other Hadoop processes do not call reattachMetrics().  The runtime exception could cause interruption to Hadoop services as observed in YARN RegistryDNS (YARN-8514).  It would be nice if metrics initialization happens in UGI class without reliance on Hadoop program to make UGI metrics initialization.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-dev-help@hadoop.apache.org