[
https://issues.apache.org/jira/browse/HADOOP-11169?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14161825#comment-14161825
]
Arun Suresh commented on HADOOP-11169:
--------------------------------------
As reported by [~andrew.wang] :
We're hitting an issue when trying to do "hdfs fetchdt", or really any KMS DT
operation. It looks very much like the truststore is not being picked up.
However, "hadoop key" operations do work.
Exception is:
{noformat}
14/10/06 19:01:14 DEBUG security.UserGroupInformation:
PrivilegedActionException as:[email protected] (auth:KERBEROS) cause:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException:
PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
{noformat}
> Fix DelegationTokenAuthenticatedURL to pass the connection Configurator to
> the authenticator
> ---------------------------------------------------------------------------------------------
>
> Key: HADOOP-11169
> URL: https://issues.apache.org/jira/browse/HADOOP-11169
> Project: Hadoop Common
> Issue Type: Bug
> Reporter: Arun Suresh
>
> KMS DelegationToken operation keeps throwing "unable to find valid
> certification path to requested target". It looks very much like the
> truststore is not being picked up.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
