[ 
https://issues.apache.org/jira/browse/HADOOP-16568?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16928715#comment-16928715
 ] 

Steve Loughran commented on HADOOP-16568:
-----------------------------------------

{code}
2019-09-12 17:31:39,678 [main] DEBUG security.UserGroupInformation 
(UserGroupInformation.java:createLoginUser(815)) - UGI loginUser:stevel 
(auth:SIMPLE)
2019-09-12 17:31:39,925 [main] DEBUG delegation.S3ADelegationTokens 
(S3ADelegationTokens.java:serviceInit(185)) - Filesystem 
s3a://hwdev-steve-ireland-new is using delegation tokens of kind 
S3ADelegationToken/Full2019-09-12 17:31:40,092 [main] INFO  
service.AbstractService (AbstractService.java:noteFailure(267)) - Service 
FullCredentials/001 failed in state 
STARTEDorg.apache.hadoop.fs.s3a.auth.delegation.DelegationTokenIOException: no 
credentials in configuration or environment variables:  No AWS credentials
        at 
org.apache.hadoop.fs.s3a.auth.MarshalledCredentials.validate(MarshalledCredentials.java:336)
        at 
org.apache.hadoop.fs.s3a.auth.delegation.FullCredentialsTokenBinding.loadAWSCredentials(FullCredentialsTokenBinding.java:105)
        at 
org.apache.hadoop.fs.s3a.auth.delegation.FullCredentialsTokenBinding.serviceStart(FullCredentialsTokenBinding.java:75)
        at 
org.apache.hadoop.service.AbstractService.start(AbstractService.java:194)
        at 
org.apache.hadoop.fs.s3a.auth.delegation.S3ADelegationTokens.serviceStart(S3ADelegationTokens.java:198)
        at 
org.apache.hadoop.service.AbstractService.start(AbstractService.java:194)
        at 
org.apache.hadoop.fs.s3a.S3AFileSystem.bindAWSClient(S3AFileSystem.java:517)
        at 
org.apache.hadoop.fs.s3a.S3AFileSystem.initialize(S3AFileSystem.java:366)
        at 
org.apache.hadoop.fs.FileSystem.createFileSystem(FileSystem.java:3370)
        at org.apache.hadoop.fs.FileSystem.access$200(FileSystem.java:136)
        at 
org.apache.hadoop.fs.FileSystem$Cache.getInternal(FileSystem.java:3419)
        at org.apache.hadoop.fs.FileSystem$Cache.get(FileSystem.java:3387)
        at org.apache.hadoop.fs.FileSystem.get(FileSystem.java:502)
        at org.apache.hadoop.fs.Path.getFileSystem(Path.java:365)
        at org.apache.hadoop.fs.shell.PathData.expandAsGlob(PathData.java:352)
        at org.apache.hadoop.fs.shell.Command.expandArgument(Command.java:250)
        at org.apache.hadoop.fs.shell.Command.expandArguments(Command.java:233)
        at 
org.apache.hadoop.fs.shell.FsCommand.processRawArguments(FsCommand.java:104)
        at org.apache.hadoop.fs.shell.Command.run(Command.java:177)
        at org.apache.hadoop.fs.FsShell.run(FsShell.java:327)
        at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:76)
        at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:90)
        at org.apache.hadoop.fs.FsShell.main(FsShell.java:390)
2019-09-12 17:31:40,094 [main] INFO  service.AbstractService 
(AbstractService.java:noteFailure(267)) - Service S3ADelegationTokens failed in 
state STARTEDorg.apache.hadoop.service.ServiceStateException: 
org.apache.hadoop.fs.s3a.auth.delegation.DelegationTokenIOException: no 
credentials in configuration or environment variables:  No AWS credentials
        at 
org.apache.hadoop.service.ServiceStateException.convert(ServiceStateException.java:105)
        at 
org.apache.hadoop.service.AbstractService.start(AbstractService.java:203)
        at 
org.apache.hadoop.fs.s3a.auth.delegation.S3ADelegationTokens.serviceStart(S3ADelegationTokens.java:198)
        at 
org.apache.hadoop.service.AbstractService.start(AbstractService.java:194)
        at 
org.apache.hadoop.fs.s3a.S3AFileSystem.bindAWSClient(S3AFileSystem.java:517)
        at 
org.apache.hadoop.fs.s3a.S3AFileSystem.initialize(S3AFileSystem.java:366)
        at 
org.apache.hadoop.fs.FileSystem.createFileSystem(FileSystem.java:3370)
        at org.apache.hadoop.fs.FileSystem.access$200(FileSystem.java:136)
        at 
org.apache.hadoop.fs.FileSystem$Cache.getInternal(FileSystem.java:3419)
        at org.apache.hadoop.fs.FileSystem$Cache.get(FileSystem.java:3387)
        at org.apache.hadoop.fs.FileSystem.get(FileSystem.java:502)
        at org.apache.hadoop.fs.Path.getFileSystem(Path.java:365)
        at org.apache.hadoop.fs.shell.PathData.expandAsGlob(PathData.java:352)
        at org.apache.hadoop.fs.shell.Command.expandArgument(Command.java:250)
        at org.apache.hadoop.fs.shell.Command.expandArguments(Command.java:233)
        at 
org.apache.hadoop.fs.shell.FsCommand.processRawArguments(FsCommand.java:104)
        at org.apache.hadoop.fs.shell.Command.run(Command.java:177)
        at org.apache.hadoop.fs.FsShell.run(FsShell.java:327)
        at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:76)
        at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:90)
        at org.apache.hadoop.fs.FsShell.main(FsShell.java:390)
Caused by: org.apache.hadoop.fs.s3a.auth.delegation.DelegationTokenIOException: 
no credentials in configuration or environment variables:  No AWS credentials
        at 
org.apache.hadoop.fs.s3a.auth.MarshalledCredentials.validate(MarshalledCredentials.java:336)
        at 
org.apache.hadoop.fs.s3a.auth.delegation.FullCredentialsTokenBinding.loadAWSCredentials(FullCredentialsTokenBinding.java:105)
        at 
org.apache.hadoop.fs.s3a.auth.delegation.FullCredentialsTokenBinding.serviceStart(FullCredentialsTokenBinding.java:75)
        at 
org.apache.hadoop.service.AbstractService.start(AbstractService.java:194)
{code}


> S3A FullCredentialsTokenBinding fails if local credentials are unset
> --------------------------------------------------------------------
>
>                 Key: HADOOP-16568
>                 URL: https://issues.apache.org/jira/browse/HADOOP-16568
>             Project: Hadoop Common
>          Issue Type: Sub-task
>          Components: fs/s3
>    Affects Versions: 3.3.0
>            Reporter: Steve Loughran
>            Assignee: Steve Loughran
>            Priority: Major
>
> Not sure how this slipped by the automated tests, but it is happening on my 
> CLI.
> # FullCredentialsTokenBinding fails on startup if there are now AWS keys in 
> the auth chain
> # because it tries to load them in serviceStart, not deployUnbonded



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to