[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-28 Thread Hudson (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13884014#comment-13884014
 ] 

Hudson commented on HADOOP-10274:
-

FAILURE: Integrated in Hadoop-Yarn-trunk #464 (See 
[https://builds.apache.org/job/Hadoop-Yarn-trunk/464/])
HADOOP-10274 Lower the logging level from ERROR to WARN for UGI.doAs method 
(Takeshi Miao via stack) (stack: 
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1561934)
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* 
/hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java


 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Priority: Minor
 Fix For: 3.0.0, 2.3.0

 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-28 Thread Uma Maheswara Rao G (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13884034#comment-13884034
 ] 

Uma Maheswara Rao G commented on HADOOP-10274:
--

I have added Takeshi Miao to contributors list and assigned this JIRA to him.

 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Assignee: takeshi.miao
Priority: Minor
 Fix For: 3.0.0, 2.3.0

 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 {code}
 So I'd like to suggest to change the logging level from '_ERROR_' to '_WARN_' 
 for 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-28 Thread Hudson (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13884120#comment-13884120
 ] 

Hudson commented on HADOOP-10274:
-

FAILURE: Integrated in Hadoop-Mapreduce-trunk #1681 (See 
[https://builds.apache.org/job/Hadoop-Mapreduce-trunk/1681/])
HADOOP-10274 Lower the logging level from ERROR to WARN for UGI.doAs method 
(Takeshi Miao via stack) (stack: 
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1561934)
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* 
/hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java


 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Assignee: takeshi.miao
Priority: Minor
 Fix For: 3.0.0, 2.3.0

 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-28 Thread Hudson (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13884137#comment-13884137
 ] 

Hudson commented on HADOOP-10274:
-

SUCCESS: Integrated in Hadoop-Hdfs-trunk #1656 (See 
[https://builds.apache.org/job/Hadoop-Hdfs-trunk/1656/])
HADOOP-10274 Lower the logging level from ERROR to WARN for UGI.doAs method 
(Takeshi Miao via stack) (stack: 
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1561934)
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* 
/hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java


 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Assignee: takeshi.miao
Priority: Minor
 Fix For: 3.0.0, 2.3.0

 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-28 Thread stack (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13884745#comment-13884745
 ] 

stack commented on HADOOP-10274:


Thank you [~umamaheswararao] for the bit of admin interjection.

 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Assignee: takeshi.miao
Priority: Minor
 Fix For: 3.0.0, 2.3.0

 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 {code}
 So I'd like to suggest to change the logging level from '_ERROR_' to '_WARN_' 
 for 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-28 Thread takeshi.miao (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13884945#comment-13884945
 ] 

takeshi.miao commented on HADOOP-10274:
---

stack  Uma Maheswara Rao G
Thanks for you guys review :)

 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Assignee: takeshi.miao
Priority: Minor
 Fix For: 3.0.0, 2.3.0

 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 {code}
 So I'd like to suggest to change the logging level from '_ERROR_' to '_WARN_' 
 for 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-27 Thread Haohui Mai (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13883127#comment-13883127
 ] 

Haohui Mai commented on HADOOP-10274:
-

This should be the same issue reported in HADOOP-10015. Since the other one has 
more progress, I'm closing this one as a duplicate.

 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Priority: Minor
 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 {code}
 So I'd like to suggest to change the logging level from '_ERROR_' to '_WARN_' 
 for 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-27 Thread Haohui Mai (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13883132#comment-13883132
 ] 

Haohui Mai commented on HADOOP-10274:
-

[~stack], when you commit the patch, can you please close this jira and 
HADOOP-10015 and mark one of them as duplicate? Thanks.

 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Priority: Minor
 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 {code}
 So I'd like to suggest to change the logging level from '_ERROR_' to '_WARN_' 
 for 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-27 Thread Hudson (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13883769#comment-13883769
 ] 

Hudson commented on HADOOP-10274:
-

SUCCESS: Integrated in Hadoop-trunk-Commit #5049 (See 
[https://builds.apache.org/job/Hadoop-trunk-Commit/5049/])
HADOOP-10274 Lower the logging level from ERROR to WARN for UGI.doAs method 
(Takeshi Miao via stack) (stack: 
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVNview=revrev=1561934)
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* 
/hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/UserGroupInformation.java


 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Priority: Minor
 Fix For: 3.0.0, 2.3.0

 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 

[jira] [Commented] (HADOOP-10274) Lower the logging level from ERROR to WARN for UGI.doAs method

2014-01-25 Thread stack (JIRA)

[ 
https://issues.apache.org/jira/browse/HADOOP-10274?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=13882074#comment-13882074
 ] 

stack commented on HADOOP-10274:


+1 from me.  Will commit in next day or so.

 Lower the logging level from ERROR to WARN for UGI.doAs method
 --

 Key: HADOOP-10274
 URL: https://issues.apache.org/jira/browse/HADOOP-10274
 Project: Hadoop Common
  Issue Type: Improvement
  Components: security
Affects Versions: 1.0.4
 Environment: hadoop-1.0.4, hbase-0.94.16, 
 krb5-server-1.6.1-31.el5_3.3, CentOS release 5.3 (Final)
Reporter: takeshi.miao
Priority: Minor
 Attachments: HADOOP-10274-trunk-v01.patch


 Recently we got the error msg Request is a replay (34) - PROCESS_TGS while 
 we are using the HBase client API to put data into HBase-0.94.16 with 
 krb5-1.6.1 enabled. The related msg as follows...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.logPriviledgedAction(UserGroupInformation.java:1143)):
  PriviledgedAction as:takeshi_miao@LAB 
 from:sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
 
 [2014-01-15 
 09:40:38,453][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.ipc.SecureClient](org.apache.hadoop.hbase.ipc.SecureClient$SecureConnection$1.run(SecureClient.java:213)):
  Exception encountered while connecting to the server : 
 javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:657)):
  Initiating logout for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,454][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.logout(UserGroupInformation.java:154)):
  hadoop logout
 [2014-01-15 09:40:38,454][hbase-tablepool-1-thread-3][INFO 
 ][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.reloginFromTicketCache(UserGroupInformation.java:667)):
  Initiating re-login for takeshi_miao@LAB
 [2014-01-15 
 09:40:38,455][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.login(UserGroupInformation.java:146)):
  hadoop login
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:95)):
  hadoop login commit
 [2014-01-15 
 09:40:38,456][hbase-tablepool-1-thread-3][DEBUG][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation$HadoopLoginModule.commit(UserGroupInformation.java:100)):
  using existing subject:[takeshi_miao@LAB, UnixPrincipal: takeshi_miao, 
 UnixNumericUserPrincipal: 501, UnixNumericGroupPrincipal [Primary Group]: 
 501, UnixNumericGroupPrincipal [Supplementary Group]: 502, takeshi_miao@LAB]
 {code}
 Finally, we found that the HBase would doing the retry (5 * 10 times) and 
 recovery this _'request is a replay (34)'_ issue, but based on the HBase user 
 viewpoint, the error msg at first line may be frightful, as we were afraid 
 there was any data loss occurring at the first sight...
 {code}
 [2014-01-15 
 09:40:38,452][hbase-tablepool-1-thread-3][ERROR][org.apache.hadoop.security.UserGroupInformation](org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1124)):
  PriviledgedActionException as:takeshi_miao@LAB 
 cause:javax.security.sasl.SaslException: GSS initiate failed [Caused by 
 GSSException: No valid credentials provided (Mechanism level: Request is a 
 replay (34) - PROCESS_TGS)]
 {code}
 So I'd like to suggest to change the logging level from '_ERROR_' to '_WARN_' 
 for 
 _o.a.hadoop.security.UserGroupInformation#doAs(PrivilegedExceptionActionT)_ 
 method
 {code}
   public T T doAs(PrivilegedExceptionActionT