Rajini Sivaram created KAFKA-12730:
--------------------------------------
Summary: A single Kerberos login failure fails all future
connections from Java 9 onwards
Key: KAFKA-12730
URL: https://issues.apache.org/jira/browse/KAFKA-12730
Project: Kafka
Issue Type: Bug
Components: security
Reporter: Rajini Sivaram
Assignee: Rajini Sivaram
Fix For: 3.0.0
The refresh thread for Kerberos performs re-login by logging out and then
logging in again. If login fails, we retry after a backoff. Every iteration of
the loop performs loginContext.logout() and loginContext.login(). If login
fails, we end up with two consecutive logouts. This used to work, but from Java
9 onwards, this results in a NullPointerException due to
https://bugs.openjdk.java.net/browse/JDK-8173069. We should check if logout is
required before attempting logout.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
