[hadoop]MAPREDUCE-5088 Report

1. Symptom

MR Client get a null renewer token when submitting a job.

1.1 Severity

Blocker

1.2 Was there exception thrown?

Yes

org.apache.oozie.action.ActionExecutorException: UninitializedMessageException: Message missing required fields: renewer

Caused by: com.google.protobuf.UninitializedMessageException: Message missing required fields: renewer

1.2.1 Were there multiple exceptions?

Yes

1.3 Scope of the failure

Users who disable their security and submitted a job.

2. How to reproduce this failure

2.0 Version

2.0.3-alpha

2.1 Configuration

1RM, 1HS

2.2 Reproduction procedure

1. Disable the security (config change)

2. MR Client submit a job through Oozie (feature start)

2.2.1 Timing order

Must be in that order

2.2.2 Events order externally controllable?

Yes

2.3 Can the logs tell how to reproduce the failure?

Yes

2.4 How many machines needed?

2(1RM+1HS)

3. Diagnosis procedure

3.1 Detailed Symptom (where you start)

The MR Client get an invalid renewer token when submitting the job.

3.2 Backward inference

The HS returns null token when the security is disabled, which will be passed by Oozie then received by the MR Client.

4. Root cause

The HS returns null token when the security is disabled and the client requires a token.

4.1 Category:

Semantic

5. Fix

5.1 How?

Send HS token only when the following situation satisfies:

1. The security is enabled.

2. Already get the RM token.

3. Don't have the HS token.