Repository: hadoop Updated Branches: refs/heads/branch-2.8 c60792e6e -> beec7a2ef
HADOOP-12559. KMS connection failures should trigger TGT renewal. Contributed by Zhe Zhang. (cherry picked from commit 993311e547e6dd7757025d5ffc285019bd4fc1f6) Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/beec7a2e Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/beec7a2e Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/beec7a2e Branch: refs/heads/branch-2.8 Commit: beec7a2efbfd52bbc44e2e9d2724ff3b8fdcbdc8 Parents: c60792e Author: Xiaoyu Yao <x...@apache.org> Authored: Mon Dec 28 10:41:26 2015 -0800 Committer: Xiaoyu Yao <x...@apache.org> Committed: Mon Dec 28 10:47:20 2015 -0800 ---------------------------------------------------------------------- hadoop-common-project/hadoop-common/CHANGES.txt | 3 +++ .../java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java | 2 ++ 2 files changed, 5 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hadoop/blob/beec7a2e/hadoop-common-project/hadoop-common/CHANGES.txt ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-common/CHANGES.txt b/hadoop-common-project/hadoop-common/CHANGES.txt index 310f2de..2134e84 100644 --- a/hadoop-common-project/hadoop-common/CHANGES.txt +++ b/hadoop-common-project/hadoop-common/CHANGES.txt @@ -886,6 +886,9 @@ Release 2.8.0 - UNRELEASED HADOOP-12681. start-build-env.sh fails in branch-2. (Kengo Seki via aajisaka) + HADOOP-12559. KMS connection failures should trigger TGT renewal. + (Zhe Zhang via xyao) + Release 2.7.3 - UNRELEASED INCOMPATIBLE CHANGES http://git-wip-us.apache.org/repos/asf/hadoop/blob/beec7a2e/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java index 4698a83..b113cec 100644 --- a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java +++ b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java @@ -474,6 +474,8 @@ public class KMSClientProvider extends KeyProvider implements CryptoExtension, UserGroupInformation.AuthenticationMethod.PROXY) ? currentUgi.getShortUserName() : null; + // check and renew TGT to handle potential expiration + actualUgi.checkTGTAndReloginFromKeytab(); // creating the HTTP connection using the current UGI at constructor time conn = actualUgi.doAs(new PrivilegedExceptionAction<HttpURLConnection>() { @Override