Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

SPNEGO authentication failure with openjdk >= 7u80 (HADOOP-10786?)

Re: SPNEGO authentication failure with openjdk >= 7u80 (HADOOP-10786

Contributor

After some fights with build I've tested the patch HADOOP-12617 . And SPNEGO started to work! Everything you need is to replace /usr/lib/hadoop/hadoop-auth-2.6.0-cdh5.5.1.jar file by this version: http://scientific.zcu.cz/repos/hadoop/MetaCentrum/hadoop-auth-2.6.0-cdh5.5.1.jar

 

The patch (slightly modified for hadoop-2.6.0+cdh5.5.1) is published here: http://scientific.zcu.cz/repos/hadoop/MetaCentrum/HADOOP-12617-MetaCentrum.patch

 

Any chance to put it into next releases of Hadoop in Cloudera?

Re: SPNEGO authentication failure with openjdk >= 7u80 (HADOOP-10786

Contributor

We rebuilt several new Cloudera versions over the time:

 

* hadoop-auth-2.6.0-cdh5.5.2.jar
* hadoop-auth-2.6.0-cdh5.6.0.jar
* hadoop-auth-2.6.0-cdh5.7.1.jar

 

...although we have only the CDH 5.5.1 throughfully tested and in production.

 

It looks like the planned CDH 6.x still contains the older version of Hadoop (2.6.0). We would be interrested in including HADOOP-12617 patch in Cloudera. It is already in upstream and planned for 2.8.0 (backported patch is here).

 

This would fix SPNEGO with cross-realms for recent Java versions (Java 8 and Java >= 7u80), with all dependent features (HDFS journal nodes and HDFS HA, ...).

Re: SPNEGO authentication failure with openjdk >= 7u80 (HADOOP-10786

Contributor

CDH 5.14.0 is still broken. The workaround is the patched hadoop-auth.jar:

 

http://scientific.zcu.cz/repos/hadoop/MetaCentrum/hadoop-auth-2.6.0-cdh5.14.0.jar

 

There is needed to backoport HADOOP-12617: http://scientific.zcu.cz/repos/hadoop/MetaCentrum/HADOOP-12617-MetaCentrum.patch

Highlighted

Re: SPNEGO authentication failure with openjdk >= 7u80 (HADOOP-10786

Rising Star

Thank you for reporting the issue. This specific fix (HADOOP-10786) is targeting CDH6 at this point.

You should also consider filing a DISTRO jira at Cloudera's JIRA system: https://issues.cloudera.org for Cloudera to consider backporting it to CDH5.x.