[ 
https://issues.apache.org/jira/browse/HADOOP-11117?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14143782#comment-14143782
 ] 

Steve Loughran commented on HADOOP-11117:
-----------------------------------------

stack/message of little or no value
{code}
org.apache.hadoop.yarn.registry.secure.TestSecureLoginstestUGILogin(org.apache.hadoop.yarn.registry.secure.TestSecureLogins)
  Time elapsed: 0.183 sec  <<< ERROR!java.io.IOException: Login failure for 
zookeeper/localhost from keytab 
/Users/stevel/Projects/Hortonworks/Projects/hadoop-trunk/hadoop-yarn-project/hadoop-yarn/hadoop-yarn-registry/target/kdc/zookeeper.keytab
        at javax.security.auth.login.LoginContext.invoke(LoginContext.java:864)
        at 
javax.security.auth.login.LoginContext.access$000(LoginContext.java:203)
        at javax.security.auth.login.LoginContext$4.run(LoginContext.java:690)
        at javax.security.auth.login.LoginContext$4.run(LoginContext.java:688)
        at java.security.AccessController.doPrivileged(Native Method)
        at 
javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:687)
        at javax.security.auth.login.LoginContext.login(LoginContext.java:596)
        at 
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1104)
        at 
org.apache.hadoop.yarn.registry.RegistryTestHelper.loginUGI(RegistryTestHelper.java:355)
        at 
org.apache.hadoop.yarn.registry.secure.TestSecureLogins.testUGILogin(TestSecureLogins.java:177)
{code}

> UGI HadoopLoginModule doesn't catch & wrap all kerberos-related exceptions
> --------------------------------------------------------------------------
>
>                 Key: HADOOP-11117
>                 URL: https://issues.apache.org/jira/browse/HADOOP-11117
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.5.1
>            Reporter: Steve Loughran
>            Priority: Minor
>
> If something is failing with kerberos login, 
> {{UserGroupInformation.loginUserFromKeytabAndReturnUGI()}} should fail with 
> useful information. But not all exceptions from the inner code are caught and 
> converted to LoginException. Those exceptions that aren't wrapped have their 
> text and stack trace lost somewhere in the javax code, leaving on the text 
> "login failed" and a stack trace of no value whatsoever.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to