[
https://issues.apache.org/jira/browse/HADOOP-15294?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16397198#comment-16397198
]
Takanobu Asanuma commented on HADOOP-15294:
-------------------------------------------
Uploaded the 1st patch.
In HADOOP-15291, we added the validations that the Set of Principals is not
empty. But it is not sufficient because there is a case that the Principals
still remains after logout. The failed test,
{{TestUGILoginFromKeytab#testReloginAfterFailedRelogin()}}, is that case.
Therefore, we need to check the Kerberos Private Credentials rather than the
Principals. It is more rigorous.
> TestUGILoginFromKeytab fails on Java9
> -------------------------------------
>
> Key: HADOOP-15294
> URL: https://issues.apache.org/jira/browse/HADOOP-15294
> Project: Hadoop Common
> Issue Type: Sub-task
> Components: security
> Environment: Applied HADOOP-12760 and HDFS-11610
> Reporter: Takanobu Asanuma
> Assignee: Takanobu Asanuma
> Priority: Major
> Attachments: HADOOP-15294.1.patch
>
>
> This is the same cause as HADOOP-15291, but this time we may need to fix
> {{UserGroupInformation}}.
> {noformat}
> [ERROR]
> testReloginAfterFailedRelogin(org.apache.hadoop.security.TestUGILoginFromKeytab)
> Time elapsed: 1.157 s <<< ERROR!
> org.apache.hadoop.security.KerberosAuthException:
> Login failure for user: [email protected]
> javax.security.auth.login.LoginException: java.lang.NullPointerException:
> invalid null input(s)
> at java.base/java.util.Objects.requireNonNull(Objects.java:246)
> at
> java.base/javax.security.auth.Subject$SecureSet.remove(Subject.java:1172)
> ...
> at
> org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.logout(UserGroupInformation.java:1888)
> at
> org.apache.hadoop.security.UserGroupInformation.unprotectedRelogin(UserGroupInformation.java:1129)
> at
> org.apache.hadoop.security.UserGroupInformation.relogin(UserGroupInformation.java:1109)
> at
> org.apache.hadoop.security.UserGroupInformation.reloginFromKeytab(UserGroupInformation.java:1078)
> at
> org.apache.hadoop.security.UserGroupInformation.reloginFromKeytab(UserGroupInformation.java:1060)
> at
> org.apache.hadoop.security.TestUGILoginFromKeytab.testReloginAfterFailedRelogin(TestUGILoginFromKeytab.java:363)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
