steveloughran commented on code in PR #4198:
URL: https://github.com/apache/hadoop/pull/4198#discussion_r852861057
##########
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager/src/main/java/org/apache/hadoop/yarn/server/resourcemanager/security/DelegationTokenRenewer.java:
##########
@@ -46,6 +46,7 @@
import java.util.concurrent.locks.ReadWriteLock;
import java.util.concurrent.locks.ReentrantReadWriteLock;
+import org.apache.hadoop.security.token.TokenIdentifier;
Review Comment:
nit: should go in to the other org.apache. imports
##########
hadoop-yarn-project/hadoop-yarn/hadoop-yarn-server/hadoop-yarn-server-resourcemanager/src/main/java/org/apache/hadoop/yarn/server/resourcemanager/security/DelegationTokenRenewer.java:
##########
@@ -522,10 +523,23 @@ private void
handleAppSubmitEvent(AbstractDelegationTokenRenewerAppEvent evt)
} else {
tokenConf = getConfig();
}
- dttr = new DelegationTokenToRenew(Arrays.asList(applicationId),
token,
- tokenConf, now, shouldCancelAtEnd, evt.getUser());
+ // decode identify to get maxDate.
+ TokenIdentifier tokenIdentifier = token.decodeIdentifier();
+ long expirationDate = now;
+ if (tokenIdentifier instanceof AbstractDelegationTokenIdentifier) {
+ // cast to abstract
+ AbstractDelegationTokenIdentifier tmpIdentifier =
+ (AbstractDelegationTokenIdentifier) tokenIdentifier;
+ expirationDate = tmpIdentifier.getMaxDate();
+ }
+ dttr = new
DelegationTokenToRenew(Collections.singletonList(applicationId), token,
+ tokenConf, expirationDate, shouldCancelAtEnd, evt.getUser());
+
try {
- renewToken(dttr);
+ // if expire date is not greater than now, renew token.
+ if (expirationDate <= now) {
Review Comment:
that's going to break if the clocks are out of sync; tokens also need to be
renewed if they are going to expire soon
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
