HADOOP-11692. Improve authentication failure WARN message to avoid user confusion. Contributed by Yongjun Zhang.

(cherry picked from commit de1101cb5b)

Conflicts:
	hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java
This commit is contained in:
Yongjun Zhang 2015-03-09 11:55:32 -07:00
parent d8d8ed35f0
commit 45cc7514f5
2 changed files with 10 additions and 2 deletions

View File

@ -659,6 +659,9 @@ Release 2.7.0 - UNRELEASED
HADOOP-11686. MiniKDC cannot change ORG_NAME or ORG_DOMAIN.
(Duo Zhang via wheat9)
HADOOP-11692. Improve authentication failure WARN message to avoid user
confusion. (Yongjun Zhang)
Release 2.6.1 - UNRELEASED
INCOMPATIBLE CHANGES

View File

@ -1297,10 +1297,15 @@ public abstract class Server {
saslResponse = processSaslMessage(saslMessage);
} catch (IOException e) {
rpcMetrics.incrAuthenticationFailures();
if (LOG.isDebugEnabled()) {
LOG.debug(StringUtils.stringifyException(e));
}
// attempting user could be null
IOException tce = (IOException) getCauseForInvalidToken(e);
AUDITLOG.warn(AUTH_FAILED_FOR + this.toString() + ":"
+ attemptingUser + " (" + e.getLocalizedMessage() + ")");
throw (IOException) getCauseForInvalidToken(e);
+ attemptingUser + " (" + e.getLocalizedMessage()
+ ") with true cause: (" + tce.getLocalizedMessage() + ")");
throw tce;
}
if (saslServer != null && saslServer.isComplete()) {