Harsh J created HADOOP-13817:
--------------------------------

             Summary: Add a finite shell command timeout to 
ShellBasedUnixGroupsMapping
                 Key: HADOOP-13817
                 URL: https://issues.apache.org/jira/browse/HADOOP-13817
             Project: Hadoop Common
          Issue Type: Improvement
          Components: security
    Affects Versions: 2.6.0
            Reporter: Harsh J
            Assignee: Harsh J
            Priority: Minor


The ShellBasedUnixGroupsMapping run various {{id}} commands via the 
ShellCommandExecutor modules without a timeout set (its set to 0, which implies 
infinite).

If this command hangs for a long time on the OS end due to an unresponsive 
groups backend or other reasons, it also blocks the handlers that use it on the 
NameNode (or other services that use this class). That inadvertently causes odd 
timeout troubles on the client end where its forced to retry (only to likely 
run into such hangs again with every attempt until at least one command 
returns).

It would be helpful to have a finite command timeout after which we may give up 
on the command and return the result equivalent of no groups found.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-dev-h...@hadoop.apache.org

Reply via email to