[ 
https://issues.apache.org/jira/browse/HDFS-12909?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Lokesh Jain updated HDFS-12909:
-------------------------------
    Attachment: HDFS-12909.patch

Through v1 patch if UserGroupInformation.isSecurityEnabled() is true then 
warning log is printed in case of error in creating SSLConnectionConfigurator 
otherwise it is not printed.

> SSLConnectionConfigurator should be created only if security is enabled
> -----------------------------------------------------------------------
>
>                 Key: HDFS-12909
>                 URL: https://issues.apache.org/jira/browse/HDFS-12909
>             Project: Hadoop HDFS
>          Issue Type: Bug
>            Reporter: Lokesh Jain
>            Assignee: Lokesh Jain
>         Attachments: HDFS-12909.patch
>
>
> Currently URLConnectionFactory#getSSLConnectionConfiguration attempts to 
> create a SSL connection configurator even if security is not enabled. This 
> raises the below false warning in the logs.
> {code:java}
> 17/12/08 10:12:03 WARN web.URLConnectionFactory: Cannot load customized ssl 
> related configuration. Fallback to system-generic settings.
> java.io.FileNotFoundException: /etc/security/clientKeys/all.jks (No such file 
> or directory)
>       at java.io.FileInputStream.open0(Native Method)
>       at java.io.FileInputStream.open(FileInputStream.java:195)
>       at java.io.FileInputStream.<init>(FileInputStream.java:138)
>       at 
> org.apache.hadoop.security.ssl.ReloadingX509TrustManager.loadTrustManager(ReloadingX509TrustManager.java:169)
>       at 
> org.apache.hadoop.security.ssl.ReloadingX509TrustManager.<init>(ReloadingX509TrustManager.java:87)
>       at 
> org.apache.hadoop.security.ssl.FileBasedKeyStoresFactory.init(FileBasedKeyStoresFactory.java:219)
>       at org.apache.hadoop.security.ssl.SSLFactory.init(SSLFactory.java:176)
>       at 
> org.apache.hadoop.hdfs.web.URLConnectionFactory.newSslConnConfigurator(URLConnectionFactory.java:164)
>       at 
> org.apache.hadoop.hdfs.web.URLConnectionFactory.getSSLConnectionConfiguration(URLConnectionFactory.java:106)
>       at 
> org.apache.hadoop.hdfs.web.URLConnectionFactory.newDefaultURLConnectionFactory(URLConnectionFactory.java:85)
>       at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:136)
>       at org.apache.hadoop.hdfs.tools.DFSck.<init>(DFSck.java:128)
>       at org.apache.hadoop.hdfs.tools.DFSck.main(DFSck.java:396)
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org

Reply via email to