Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-9880

SASL changes from HADOOP-9421 breaks Secure HA NN

VotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 2.1.0-beta
    • 2.1.1-beta
    • None
    • None
    • Reviewed

    Description

      buildSaslNegotiateResponse() will create a SaslRpcServer with TOKEN auth. When create() is called against it, secretManager.checkAvailableForRead() is called, which fails in HA standby. Thus HA standby nodes cannot be transitioned to active.

      Attachments

        1. HADOOP-9880.patch
          4 kB
          Daryn Sharp

        Issue Links

        breaks

        Bug - A problem which impairs or prevents the functions of the product. HDFS-5124 DelegationTokenSecretManager#retrievePassword can cause deadlock in NameNode

        • Blocker - Blocks development and/or testing work, production could not run
        • Closed
        is related to

        Sub-task - The sub-task of the issue HADOOP-9421 Convert SASL to use ProtoBuf and provide negotiation capabilities

        • Blocker - Blocks development and/or testing work, production could not run
        • Closed

        Bug - A problem which impairs or prevents the functions of the product. HDFS-3083 Cannot run an MR job with HA and security enabled when second-listed NN active

        • Critical - Crashes, loss of data, severe memory leak.
        • Closed

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            daryn Daryn Sharp
            kihwal Kihwal Lee
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment