diff --git a/hadoop-common-project/hadoop-common/CHANGES.txt b/hadoop-common-project/hadoop-common/CHANGES.txt
index 8473c007a37..843bf130977 100644
--- a/hadoop-common-project/hadoop-common/CHANGES.txt
+++ b/hadoop-common-project/hadoop-common/CHANGES.txt
@@ -143,6 +143,8 @@ Release 0.23.3 - UNRELEASED
 
     HADOOP-8167. Configuration deprecation logic breaks backwards compatibility (tucu)
 
+    HADOOP-8189. LdapGroupsMapping shouldn't throw away IOException. (Jonathan Natkins via atm)
+
   BREAKDOWN OF HADOOP-7454 SUBTASKS
 
     HADOOP-7455. HA: Introduce HA Service Protocol Interface. (suresh)
diff --git a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/LdapGroupsMapping.java b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/LdapGroupsMapping.java
index e40916e0c87..bcccb198ebc 100644
--- a/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/LdapGroupsMapping.java
+++ b/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/LdapGroupsMapping.java
@@ -314,8 +314,8 @@ public class LdapGroupsMapping
       }
       reader.close();
       return password.toString();
-    } catch (IOException ex) {
-      throw new RuntimeException("Could not read password file: " + pwFile);
+    } catch (IOException ioe) {
+      throw new RuntimeException("Could not read password file: " + pwFile, ioe);
     }
   }
 }