[ 
https://issues.apache.org/jira/browse/YARN-2677?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14167486#comment-14167486
 ] 

Steve Loughran commented on YARN-2677:
--------------------------------------

it also looks like somehow the full kerberos name creeps in —that needs to be 
name-shortened the way UGI does
{code}
14/10/10 17:35:45 ERROR main.ServiceLauncher: Exception: 
`/users/hb...@hwqe.hortonworks.com/services/org-apache-slider/hbcluster24': 
Invalid Path element "hb...@hwqe.hortonworks.com"
org.apache.hadoop.registry.client.exceptions.InvalidPathnameException: 
`/users/hb...@apache.org/services/org-apache-slider/hbcluster24': Invalid Path 
element "hbase@@APACHE.ORG"
        at 
org.apache.hadoop.registry.client.binding.RegistryPathUtils.validateElementsAsDNS(RegistryPathUtils.java:78)
        at 
org.apache.hadoop.registry.client.impl.zk.RegistryOperationsService.validatePath(RegistryOperationsService.java:91)
        at 
org.apache.hadoop.registry.client.impl.zk.RegistryOperationsService.delete(RegistryOperationsService.java:151)
        at 
org.apache.slider.server.services.yarnregistry.YarnRegistryViewForProviders.putService(YarnRegistryViewForProviders.java:138)
        at 
org.apache.slider.server.appmaster.SliderAppMaster.registerServiceInstance(SliderAppMaster.java:1002)
        at 
org.apache.slider.server.appmaster.SliderAppMaster.createAndRunCluster(SliderAppMaster.java:846)
        at 
org.apache.slider.server.appmaster.SliderAppMaster.runService(SliderAppMaster.java:507)
{code}

> registry punycoding of usernames doesn't fix all usernames to be DNS-valid
> --------------------------------------------------------------------------
>
>                 Key: YARN-2677
>                 URL: https://issues.apache.org/jira/browse/YARN-2677
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: api, resourcemanager
>    Affects Versions: 2.6.0
>            Reporter: Steve Loughran
>            Assignee: Steve Loughran
>
> The registry has a restriction "DNS-valid names only" to retain the future 
> option of DNS exporting of the registry.
> to handle complex usernames, it punycodes the username first, using Java's 
> {{java.net.IDN}} class.
> This turns out to only map high unicode-> ASCII, and does nothing for 
> ascii-but-invalid-hostname chars, so stopping users with DNS-illegal names 
> (e.g. with an underscore in them) from being able to register



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to