[ 
https://issues.apache.org/jira/browse/HADOOP-9747?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16126164#comment-16126164
 ] 

Jeff Storck commented on HADOOP-9747:
-------------------------------------

[~daryn] Can you confirm that the two patches, HADOOP-9747.2.branch-2.patch and 
HADOOP-9747.2.trunk.patch (for their respective branches) are all that is 
needed to resolve the two open subtasks in this JIRA?

I've done my own testing for two principals being logged in and that they are 
able to relogin simultaneously using a single classloader, and this fixes a 
core issue that NiFi has been trying to work around for quite a while.  I have 
a suspicion that this might help us out with another issue regarding TDE where 
the hadoop client is not able to authenticate with a KMS (no TGT found) after 
successfully logging in with the KDC from a keytab.  The client seems to be 
"forgetting" that a principal was logged in from a keytab and ends up falling 
back to the OS user.

> Reduce unnecessary UGI synchronization
> --------------------------------------
>
>                 Key: HADOOP-9747
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9747
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 0.23.0, 2.0.0-alpha, 3.0.0-alpha1
>            Reporter: Daryn Sharp
>            Assignee: Daryn Sharp
>            Priority: Critical
>         Attachments: HADOOP-9747.2.branch-2.patch, HADOOP-9747.2.trunk.patch, 
> HADOOP-9747.branch-2.patch, HADOOP-9747.trunk.patch
>
>
> Jstacks of heavily loaded NNs show up to dozens of threads blocking in the 
> UGI.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to