Repository: hadoop Updated Branches: refs/heads/branch-2.7 f0c278469 -> c6f68a7f9
HADOOP-12559. KMS connection failures should trigger TGT renewal. Contributed by Zhe Zhang. Conflicts: hadoop-common-project/hadoop-common/CHANGES.txt Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/c6f68a7f Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/c6f68a7f Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/c6f68a7f Branch: refs/heads/branch-2.7 Commit: c6f68a7f98c35bef3a9cf4c71f19c249612618e9 Parents: f0c2784 Author: Xiaoyu Yao <x...@apache.org> Authored: Mon Dec 28 10:41:26 2015 -0800 Committer: Zhe Zhang <zezh...@zezhang-ld1.linkedin.biz> Committed: Fri Mar 18 17:48:56 2016 -0700 ---------------------------------------------------------------------- .../java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java | 2 ++ 1 file changed, 2 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/hadoop/blob/c6f68a7f/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java ---------------------------------------------------------------------- diff --git a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java index 149424f..ea50d21 100644 --- a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java +++ b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java @@ -474,6 +474,8 @@ public class KMSClientProvider extends KeyProvider implements CryptoExtension, UserGroupInformation.AuthenticationMethod.PROXY) ? currentUgi.getShortUserName() : null; + // check and renew TGT to handle potential expiration + actualUgi.checkTGTAndReloginFromKeytab(); // creating the HTTP connection using the current UGI at constructor time conn = actualUgi.doAs(new PrivilegedExceptionAction<HttpURLConnection>() { @Override