You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Sunil Govindan (JIRA)" <ji...@apache.org> on 2018/08/29 04:25:00 UTC
[jira] [Commented] (HADOOP-14080)
UserGroupInformation#loginUserFromKeytab does not load hadoop tokens ?
[ https://issues.apache.org/jira/browse/HADOOP-14080?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16595931#comment-16595931 ]
Sunil Govindan commented on HADOOP-14080:
-----------------------------------------
As this jira is marked for 3.2 as a blocker, cud u pls help to take this forward or move out if its not feasible to finish in coming weeks. 3.2 code freeze date is nearby in a weeks. Kindly help to check the same.
> UserGroupInformation#loginUserFromKeytab does not load hadoop tokens ?
> -----------------------------------------------------------------------
>
> Key: HADOOP-14080
> URL: https://issues.apache.org/jira/browse/HADOOP-14080
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Jian He
> Priority: Critical
>
> Found that UserGroupInformation#loginUserFromKeytab will not try to load hadoop tokens from HADOOP_TOKEN_FILE_LOCATION as loginUserFromSubject method does. I know typically, if you have the keytab, you probably won't need the token, but is this an expected behavior ?
> The problem with this is that suppose a long running app on YARN has its own keytabs, it does login via UserGroupInformation#loginUserFromKeytab, however, it will not load the hadoop tokens passed by YARN and YARN requires the token to be present for communication e.g. AM - RM communication.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org