[ 
https://issues.apache.org/jira/browse/HBASE-21933?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16772047#comment-16772047
 ] 

Sean Busbey commented on HBASE-21933:
-------------------------------------

line numbers don't fit, because I don't know what version, but this looks like 
the issue:

# [Krb5LoginModule asks for private credentials and iterates over it to remove 
things|https://github.com/unofficial-openjdk/openjdk/blob/jdk8u/jdk8u/jdk/src/share/classes/com/sun/security/auth/module/Krb5LoginModule.java#L1206]
# [Subject just returns the backing private credential 
set|https://github.com/unofficial-openjdk/openjdk/blob/jdk8u/jdk8u/jdk/src/share/classes/javax/security/auth/Subject.java#L685]
# [that private credential set is a set wrapped in 
Collections.synchronizedSet|https://github.com/unofficial-openjdk/openjdk/blob/jdk8u/jdk8u/jdk/src/share/classes/javax/security/auth/Subject.java#L160]
# [Collections.synchronizedSet specifies that iterator use like the one in 
Krb5LoginModule must use a synchronized block on the 
collection|https://docs.oracle.com/javase/8/docs/api/java/util/Collections.html#synchronizedSet-java.util.Set-],
 which the code isn't doing.

def a jdk bug in *some* jdk versions. gonna go find official source.

> regionserver (with kerberos ) relogin failture from keytab due to the 
> ConcurrentModificationException
> -----------------------------------------------------------------------------------------------------
>
>                 Key: HBASE-21933
>                 URL: https://issues.apache.org/jira/browse/HBASE-21933
>             Project: HBase
>          Issue Type: Bug
>          Components: regionserver
>    Affects Versions: 1.2.0
>            Reporter: powerinf
>            Priority: Blocker
>         Attachments: region failture.txt
>
>
> Hbase regionserver  could not relogin from keytab hbase.keytab ,more see log



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to