Are you running on JDK 8? Could be this: https://issues.apache.org/jira/browse/HADOOP-10786
> On May 29, 2015, at 9:46 AM, Yohan Bismuth <[email protected]> wrote: > > I just recompiled slider after i replaced the call to isFromKeytab() > in validateLoginUser by isLoginKeytabBased(). Then i redeployed it on my > gateway and launched my application. > The error is the same as before. > > On Fri, May 29, 2015 at 3:36 PM, Jon Maron <[email protected]> wrote: > >> Please describe the full procedure you used to retest. >> >>> On May 29, 2015, at 9:28 AM, Yohan Bismuth <[email protected]> >> wrote: >>> >>> ...but i got the same problem using this method instead >>> >>> On Fri, May 29, 2015 at 3:25 PM, Yohan Bismuth <[email protected] >>> >>> wrote: >>> >>>> oops my bad, was not looking the good thing >>>> >>>> On Fri, May 29, 2015 at 3:13 PM, Jon Maron <[email protected]> >> wrote: >>>> >>>>> It’s declared as public static: >>>>> >>>>> public synchronized static boolean isLoginKeytabBased() >>>>> >>>>> at least the version I’m looking at >>>>> >>>>>> On May 29, 2015, at 8:52 AM, Yohan Bismuth <[email protected]> >>>>> wrote: >>>>>> >>>>>> Mmh I can't compile this. I don't think you can use >> isLoginKeytabBased() >>>>>> since isKeytab is private in ugi. >>>>>> >>>>>> On Fri, May 29, 2015 at 1:56 PM, Jon Maron <[email protected]> >>>>> wrote: >>>>>> >>>>>>> Looks like you’ve found a bug: validateLoginUser should be calling >>>>>>> isLoginKeytabBased(), not isFromKeytab(). Would mind filing a JIRA? >>>>>>> >>>>>>> — Jon >>>>>>> >>>>>>>> On May 29, 2015, at 5:24 AM, Yohan Bismuth < >> [email protected]> >>>>>>> wrote: >>>>>>>> >>>>>>>> Btw, i've tried using java7 and java8: smae issue. >>>>>>>> I'm correctly logged as the principal of my keytab, and i can submit >>>>> jobs >>>>>>>> (like a wordcount) using this keytab. >>>>>>>> >>>>>>>> If i remove this line from the code: >>>>>>>> >>>>>>>>> validateLoginUser(UserGroupInformation.getLoginUser()); >>>>>>>> >>>>>>>> everything seems to work fine. >>>>>>>> >>>>>>>> hasKerberosCredentials returns true, so the login must be based on a >>>>>>>>> kerberos ticket. Perhaps it has expired? >>>>>>>> >>>>>>>> Well, this is the point here, i don't want the login to be based on >> a >>>>>>>> kerberos ticket (because it would mean the ugi has the wrong flag >> set >>>>> to >>>>>>>> true). I want the login to be based on a kerberos key. >>>>>>>> >>>>>>>> >>>>>>>> 2015-05-29 8:49 GMT+02:00 Jean-Baptiste Note <[email protected]>: >>>>>>>> >>>>>>>>> C'est pas très grave pour nous c'est packagé à la cradoc pour >>>>> l'instant. >>>>>>>>> C'est peut-etre aussi le fix ! Faudrait faire un git blame pour >>>>>>> comprendre >>>>>>>>> pourquoi l'exception est là. Elle trigge peut-etre aussi dans un >> cas >>>>>>>>> légitime ? >>>>>>>>> >>>>>>>>> Question subsidiaire: tu soumets bien le job en tant que >>>>>>>>> [email protected] et pas [email protected] ? >> (c'est >>>>> la >>>>>>>>> meme question que: tu as fait kinit en plus subtil) >>>>>>>>> Tu as essayé avec un krb5.conf qui mette bien HPC.CRITEO.PREPROD en >>>>>>>>> default realm sur la gateway. >>>>>>>>> >>>>>>>>> JB >>>>>>>>> >>>>>>>>> 2015-05-28 23:05 GMT+02:00 Yohan Bismuth <[email protected] >>> : >>>>>>>>> >>>>>>>>>> Bah ça implique de modifier et recompiler slider. Je sais pas si >> on >>>>>>> veut >>>>>>>>>> ça... >>>>>>>>>> >>>>>>>>>> 2015-05-28 22:20 GMT+02:00 Jean-Baptiste Note <[email protected]>: >>>>>>>>>> >>>>>>>>>>> OK j'ai rien dit :) >>>>>>>>>>> Tu peux spécifier tout ça dans le thread, si vraiment ça >> fonctionne >>>>>>> sans >>>>>>>>>>> l'exception, je vois même pas pourquoi on s'embête en fait ??? >>>>>>>>>>> >>>>>>>>>>> JB >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> Jean-Baptiste Note >>>>>>>>> >>>>>>> >>>>>>> >>>>> >>>>> >>>> >> >>
