# Hadoop 1.0.0 Release Notes

These release notes include new developer and user-facing incompatibilities, features, and major improvements.

## Changes since Hadoop 0.20.205.0

### Jiras with Release Notes (describe major or incompatible changes)

- HADOOP-7728. Major bug reported by rramya and fixed by rramya (conf)
  hadoop-setup-conf.sh should be modified to enable task memory manager

  > Enable task memory management to be configurable via hadoop config setup script.

- HADOOP-7740. Minor bug reported by arpitgupta and fixed by arpitgupta (conf)
  security audit logger is not on by default, fix the log4j properties to enable the logger

  > Fixed security audit logger configuration. (Arpit Gupta via Eric Yang)

- HDFS-617. Major improvement reported by kzhang and fixed by kzhang (hdfs client, name-node)
  Support for non-recursive create() in HDFS

  > New DFSClient.create(...) allows option of not creating missing parent(s).

- HDFS-2246. Major improvement reported by sanjay.radia and fixed by jnp
  Shortcut a local client reads to a Datanodes files directly

  > 1. New configurations
  > a. dfs.block.local-path-access.user is the key in datanode configuration to specify the user allowed to do short circuit read.
  > b. dfs.client.read.shortcircuit is the key to enable short circuit read at the client side configuration.
  > c. dfs.client.read.shortcircuit.skip.checksum is the key to bypass checksum check at the client side.
  > 2. By default none of the above are enabled and short circuit read will not kick in.
  > 3. If security is on, the feature can be used only for user that has kerberos credentials at the client, therefore map reduce tasks cannot benefit from it in general.

- HDFS-2316. Major new feature reported by szetszwo and fixed by szetszwo
  [umbrella] webhdfs: a complete FileSystem implementation for accessing HDFS over HTTP

  > Provide webhdfs as a complete FileSystem implementation for accessing HDFS over HTTP.
  > Previous hftp feature was a read-only FileSystem and does not provide "write" accesses.

### Other Jiras (describe bug fixes and minor changes)

- HADOOP-5124. Major improvement reported by hairong and fixed by hairong
  A few optimizations to FsNamesystem#RecentInvalidateSets

  > This jira proposes a few optimization to FsNamesystem#RecentInvalidateSets:
  > 1. when removing all replicas of a block, it does not traverse all nodes in the map. Instead it traverse only the nodes that the block is located.
  > 2. When dispatching blocks to datanodes in ReplicationMonitor. It randomly chooses a predefined number of datanodes and dispatches blocks to those datanodes. This strategy provides fairness to all datanodes. The current strategy always starts from the first datanode.

- HADOOP-6840. Minor improvement reported by nspiegelberg and fixed by jnp (fs, io)
  Support non-recursive create() in FileSystem & SequenceFile.Writer

  > The proposed solution for HBASE-2312 requires the sequence file to handle a non-recursive create. This is already supported by HDFS, but needs to have an equivalent FileSystem & SequenceFile.Writer API.

- HADOOP-6886. Minor improvement reported by nspiegelberg and fixed by (fs)
  LocalFileSystem Needs createNonRecursive API

  > While running sanity check tests for HBASE-2312, I noticed that HDFS-617 did not include createNonRecursive() support for the LocalFileSystem. This is a problem for HBase, which allows the user to run over the LocalFS instead of HDFS for local cluster testing. I think this only affects 0.20-append, but may affect the trunk based upon how exactly FileContext handles non-recursive creates.

- HADOOP-7664. Minor improvement reported by raviprak and fixed by raviprak (conf)
  o.a.h.conf.Configuration complains of overriding final parameter even if the value with which its attempting to override is the same.

  > o.a.h.conf.Configuration complains of overriding final parameter even if the value with which its attempting to override is the same.

- HADOOP-7765. Major bug reported by eyang and fixed by eyang (build)
  Debian package contain both system and tar ball layout

  > When packaging is invoked as "ant clean tar deb". The system creates both system layout and tarball layout in the same build directory. Debian packaging target would pick up files for both layouts. The end result of using produced debian package built this way, would end up README.txt LICENSE.txt, and jar files in /usr.

- HADOOP-7784. Major bug reported by arpitgupta and fixed by eyang
  secure datanodes fail to come up stating jsvc not found

  > building 205.1 and trying to startup a secure dn leads to the following
  > /usr/libexec/../bin/hadoop: line 386: /usr/libexec/../libexec/jsvc.amd64: No such file or directory
  > /usr/libexec/../bin/hadoop: line 386: exec: /usr/libexec/../libexec/jsvc.amd64: cannot execute: No such file or directory

- HADOOP-7804. Major improvement reported by arpitgupta and fixed by arpitgupta (conf)
  enable hadoop config generator to set dfs.block.local-path-access.user to enable short circuit read

  > we have a new config that allows to select which user can have access for short circuit read. We should make that configurable through the config generator scripts.

- HADOOP-7815. Minor bug reported by rramya and fixed by rramya (conf)
  Map memory mb is being incorrectly set by hadoop-setup-conf.sh

  > HADOOP-7728 enabled task memory management to be configurable in the hadoop-setup-conf.sh. However, the default value for mapred.job.map.memory.mb is being set incorrectly.

- HADOOP-7816. Major bug reported by davet and fixed by davet
  Allow HADOOP_HOME deprecated warning suppression based on config specified in hadoop-env.sh

  > Move suppression check for "Warning: $HADOOP_HOME is deprecated" to after sourcing of hadoop-env.sh so that people can set HADOOP_HOME_WARN_SUPPRESS inside the config.

- HADOOP-7853. Blocker bug reported by daryn and fixed by daryn (security)
  multiple javax security configurations cause conflicts

  > Both UGI and the SPNEGO KerberosAuthenticator set the global javax security configuration. SPNEGO stomps on UGI's security config which leads to kerberos/SASL authentication errors.

- HADOOP-7854. Critical bug reported by daryn and fixed by daryn (security)
  UGI getCurrentUser is not synchronized

  > Sporadic {{ConcurrentModificationExceptions}} are originating from {{UGI.getCurrentUser}} when it needs to create a new instance. The problem was specifically observed in a JT under heavy load when a post-job cleanup is accessing the UGI while a new job is being processed.

- HADOOP-7865. Major bug reported by jnp and fixed by jnp
  Test Failures in 1.0.0 hdfs/common

  > Following tests in hdfs and common are failing
  > 1. TestFileAppend2
  > 2. TestFileConcurrentReader
  > 3. TestDoAsEffectiveUser

- HADOOP-7869. Critical bug reported by owen.omalley and fixed by owen.omalley (scripts)
  HADOOP_HOME warning happens all of the time

  > With HADOOP-7816, the check for HADOOP_HOME has moved after it is set by hadoop-config so that it always happens unless HADOOP_HOME_WARN_SUPPRESS is set in hadoop-env or the environment.

- HDFS-611. Major bug reported by dhruba and fixed by zshao (data-node)
  Heartbeats times from Datanodes increase when there are plenty of blocks to delete

  > I am seeing that when we delete a large directory that has plenty of blocks, the heartbeat times from datanodes increase significantly from the normal value of 3 seconds to as large as 50 seconds or so. The heartbeat thread in the Datanode deletes a bunch of blocks sequentially, this causes the heartbeat times to increase.

- HDFS-1257. Major bug reported by rvadali and fixed by eepayne (name-node)
  Race condition on FSNamesystem#recentInvalidateSets introduced by HADOOP-5124

  > HADOOP-5124 provided some improvements to FSNamesystem#recentInvalidateSets. But it introduced unprotected access to the data structure recentInvalidateSets. Specifically, FSNamesystem.computeInvalidateWork accesses recentInvalidateSets without read-lock protection. If there is concurrent activity (like reducing replication on a file) that adds to recentInvalidateSets, the name-node crashes with a ConcurrentModificationException.

- HDFS-1943. Blocker bug reported by weiyj and fixed by mattf (scripts)
  fail to start datanode while start-dfs.sh is executed by root user

  > When start-dfs.sh is run by root user, we got the following error message:
  > # start-dfs.sh
  > Starting namenodes on [localhost ]
  > localhost: namenode running as process 2556. Stop it first.
  > localhost: starting datanode, logging to /usr/hadoop/hadoop-common-0.23.0-SNAPSHOT/bin/../logs/hadoop-root-datanode-cspf01.out
  > localhost: Unrecognized option: -jvm
  > localhost: Could not create the Java virtual machine.
  > The -jvm options should be passed to jsvc when we starting a secure
  > datanode, but it still pa...

- HDFS-2065. Major bug reported by bharathm and fixed by umamaheswararao
  Fix NPE in DFSClient.getFileChecksum

  > The following code can throw NPE if callGetBlockLocations returns null.
  > If server returns null
  > {code}
  > List<LocatedBlock> locatedblocks
  > = callGetBlockLocations(namenode, src, 0, Long.MAX_VALUE).getLocatedBlocks();
  > {code}
  > The right fix for this is server should throw right exception.

- HDFS-2346. Blocker bug reported by umamaheswararao and fixed by lakshman (test)
  TestHost2NodesMap & TestReplicasMap will fail depending upon execution order of test methods

- HDFS-2416. Major sub-task reported by arpitgupta and fixed by jnp
  distcp with a webhdfs uri on a secure cluster fails

- HDFS-2424. Major sub-task reported by arpitgupta and fixed by szetszwo
  webhdfs liststatus json does not convert to a valid xml document

- HDFS-2427. Major sub-task reported by arpitgupta and fixed by szetszwo
  webhdfs mkdirs api call creates path with 777 permission, we should default it to 755

- HDFS-2428. Major sub-task reported by arpitgupta and fixed by szetszwo
  webhdfs api parameter validation should be better

  > PUT Request: http://localhost:50070/webhdfs/some_path?op=MKDIRS&permission=955
  > Exception returned
  > HTTP/1.1 500 Internal Server Error
  > {"RemoteException":{"className":"com.sun.jersey.api.ParamException$QueryParamException","message":"java.lang.NumberFormatException: For input string: \"955\""}}
  > We should return a 400 with appropriate error message

- HDFS-2432. Major sub-task reported by arpitgupta and fixed by szetszwo
  webhdfs setreplication api should return a 403 when called on a directory

  > Currently the set replication api on a directory leads to a 200.
  > Request URI http://NN:50070/webhdfs/tmp/webhdfs_data/dir_replication_tests?op=SETREPLICATION&replication=5
  > Request Method: PUT
  > Status Line: HTTP/1.1 200 OK
  > Response Content: {"boolean":false}
  > Since we can determine that this call did not succeed (boolean=false) we should rather just return a 403

- HDFS-2439. Major sub-task reported by arpitgupta and fixed by szetszwo
  webhdfs open an invalid path leads to a 500 which states a npe, we should return a 404 with appropriate error message

- HDFS-2441. Major sub-task reported by arpitgupta and fixed by szetszwo
  webhdfs returns two content-type headers

  > $ curl -i "http://localhost:50070/webhdfs/path?op=GETFILESTATUS"
  > HTTP/1.1 200 OK
  > Content-Type: text/html; charset=utf-8
  > Expires: Thu, 01-Jan-1970 00:00:00 GMT
  > ........
  > Content-Type: application/json
  > Transfer-Encoding: chunked
  > Server: Jetty(6.1.26)
  > It should only return one content type header = application/json

- HDFS-2450. Major bug reported by rajsaha and fixed by daryn
  Only complete hostname is supported to access data via hdfs://

  > If my complete hostname is host1.abc.xyz.com, only complete hostname must be used to access data via hdfs://
  > I am running following in .20.205 Client to get data from .20.205 NN (host1)
  > $hadoop dfs -copyFromLocal /etc/passwd hdfs://host1/tmp
  > copyFromLocal: Wrong FS: hdfs://host1/tmp, expected: hdfs://host1.abc.xyz.com
  > Usage: java FsShell [-copyFromLocal <localsrc> ... <dst>]
  > $hadoop dfs -copyFromLocal /etc/passwd hdfs://host1.abc/tmp/
  > copyFromLocal: Wrong FS: hdfs://host1.blue/tmp/1, exp...

- HDFS-2453. Major sub-task reported by arpitgupta and fixed by szetszwo
  tail using a webhdfs uri throws an error

  > /usr//bin/hadoop --config /etc/hadoop dfs -tail webhdfs://NN:50070/file
  > tail: HTTP_PARTIAL expected, received 200

- HDFS-2494. Major sub-task reported by umamaheswararao and fixed by umamaheswararao (data-node)
  [webhdfs] When Getting the file using OP=OPEN with DN http address, ESTABLISHED sockets are growing.

  > As part of the reliable test,
  > Scenario:
  > Initially check the socket count. ---there are aroud 42 sockets are there.
  > open the file with DataNode http address using op=OPEN request parameter about 500 times in loop.
  > Wait for some time and check the socket count. --- There are thousands of ESTABLISHED sockets are growing. ~2052
  > Here is the netstat result:
  > C:\Users\uma>netstat | grep 127.0.0.1 | grep ESTABLISHED |wc -l
  > 2042
  > C:\Users\uma>netstat | grep 127.0.0.1 | grep ESTABLISHED |wc -l
  > 2042
  > C:\...

- HDFS-2501. Major sub-task reported by szetszwo and fixed by szetszwo
  add version prefix and root methods to webhdfs

- HDFS-2527. Major sub-task reported by szetszwo and fixed by szetszwo
  Remove the use of Range header from webhdfs

- HDFS-2528. Major sub-task reported by arpitgupta and fixed by szetszwo
  webhdfs rest call to a secure dn fails when a token is sent

  > curl -L -u : --negotiate -i "http://NN:50070/webhdfs/v1/tmp/webhdfs_data/file_small_data.txt?op=OPEN"
  > the following exception is thrown by the datanode when the redirect happens.
  > {"RemoteException":{"exception":"IOException","javaClassName":"java.io.IOException","message":"Call to failed on local exception: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]"}}
  > ...

- HDFS-2539. Major sub-task reported by szetszwo and fixed by szetszwo
  Support doAs and GETHOMEDIRECTORY in webhdfs

- HDFS-2540. Major sub-task reported by szetszwo and fixed by szetszwo
  Change WebHdfsFileSystem to two-step create/append

- HDFS-2552. Major task reported by szetszwo and fixed by szetszwo (documentation)
  Add WebHdfs Forrest doc

- HDFS-2590. Major bug reported by szetszwo and fixed by szetszwo (documentation)
  Some links in WebHDFS forrest doc do not work

  > Some links are pointing to DistributedFileSystem javadoc but the javadoc of DistributedFileSystem is not generated by default.

- HDFS-2604. Minor improvement reported by szetszwo and fixed by szetszwo (data-node, documentation, name-node)
  Add a log message to show if WebHDFS is enabled

  > WebHDFS can be enabled/disabled by the conf key {{dfs.webhdfs.enabled}}. Let's add a log message to show if it is enabled.

- MAPREDUCE-3169. Major improvement reported by tlipcon and fixed by ahmed.radwan (mrv1, mrv2, test)
  Create a new MiniMRCluster equivalent which only provides client APIs cross MR1 and MR2

  > Many dependent projects like HBase, Hive, Pig, etc, depend on MiniMRCluster for writing tests. Many users do as well. MiniMRCluster, however, exposes MR implementation details like the existence of TaskTrackers, JobTrackers, etc, since it was used by MR1 for testing the server implementations as well.
  > This JIRA is to create a new interface which could be implemented either by MR1 or MR2 that exposes only the client-side portions of the MR framework. Ideally it would be "recompile-compatible"...

- MAPREDUCE-3374. Major bug reported by rvs and fixed by (task-controller)
  src/c++/task-controller/configure is not set executable in the tarball and that prevents task-controller from rebuilding

  > ant task-controller fails because src/c++/task-controller/configure is not set executable

- MAPREDUCE-3480. Major bug reported by jnp and fixed by jnp
  TestJvmReuse fails in 1.0

  > TestJvmReuse is failing in apache builds, although it passes in my local machine.

## Changes since Hadoop 0.20.204.0

- HADOOP-6722. Major bug reported by tlipcon and fixed by tlipcon (util)
  NetUtils.connect should check that it hasn't connected a socket to itself

  > I had no idea this was possible, but it turns out that a TCP connection will be established in the rare case that the local side of the socket binds to the ephemeral port that you later try to connect to. This can present itself in very very rare occasion when an RPC client is trying to connect to a daemon running on the same node, but that daemon is down. To see what I'm talking about, run "while true ; do telnet localhost 60020 ; done" on a multicore box and wait several minutes.
  > This can ...

- HADOOP-6833. Blocker bug reported by tlipcon and fixed by tlipcon
  IPC leaks call parameters when exceptions thrown

  > HADOOP-6498 moved the calls.remove() call lower into the SUCCESS clause of receiveResponse(), but didn't put a similar calls.remove into the ERROR clause. So, any RPC call that throws an exception ends up orphaning the Call object in the connection's "calls" hashtable. This prevents cleanup of the connection and is a memory leak for the call parameters.

- HADOOP-6889. Major new feature reported by hairong and fixed by johnvijoe (ipc)
  Make RPC to have an option to timeout

  > Currently Hadoop RPC does not timeout when the RPC server is alive. What it currently does is that a RPC client sends a ping to the server whenever a socket timeout happens. If the server is still alive, it continues to wait instead of throwing a SocketTimeoutException. This is to avoid a client to retry when a server is busy and thus making the server even busier. This works great if the RPC server is NameNode.
  > But Hadoop RPC is also used for some of client to DataNode communications, for e...

- HADOOP-7119. Major new feature reported by tucu00 and fixed by tucu00 (security)
  add Kerberos HTTP SPNEGO authentication support to Hadoop JT/NN/DN/TT web-consoles

  > Adding support for Kerberos HTTP SPNEGO authentication to the Hadoop web-consoles

- HADOOP-7314. Major improvement reported by naisbitt and fixed by naisbitt
  Add support for throwing UnknownHostException when a host doesn't resolve

  > As part of MAPREDUCE-2489, we need support for having the resolve methods (for DNS mapping) throw UnknownHostExceptions. (Currently, they hide the exception). Since the existing 'resolve' method is ultimately used by several other locations/components, I propose we add a new 'resolveValidHosts' method.

- HADOOP-7343. Minor improvement reported by tgraves and fixed by tgraves (test)
  backport HADOOP-7008 and HADOOP-7042 to branch-0.20-security

  > backport HADOOP-7008 and HADOOP-7042 to branch-0.20-security so that we can enable test-patch.sh to have a configured number of acceptable findbugs and javadoc warnings

- HADOOP-7400. Major bug reported by gkesavan and fixed by gkesavan (build)
  HdfsProxyTests fails when the -Dtest.build.dir and -Dbuild.test is set

  > HdfsProxyTests fails when the -Dtest.build.dir and -Dbuild.test is set a dir other than build dir
  > test-junit:
  > [copy] Copying 1 file to /home/y/var/builds/thread2/workspace/Cloud-Hadoop-0.20.1xx-Secondary/src/contrib/hdfsproxy/src/test/resources/proxy-config
  > [junit] Running org.apache.hadoop.hdfsproxy.TestHdfsProxy
  > [junit] Tests run: 1, Failures: 0, Errors: 1, Time elapsed: 0 sec
  > [junit] Test org.apache.hadoop.hdfsproxy.TestHdfsProxy FAILED

- HADOOP-7432. Major improvement reported by sherri_chen and fixed by sherri_chen
  Back-port HADOOP-7110 to 0.20-security

  > HADOOP-7110 implemented chmod in the NativeIO library so we can have good performance (ie not fork) and still not be prone to races. This should fix build failures (and probably task failures too).

- HADOOP-7472. Minor improvement reported by kihwal and fixed by kihwal (ipc)
  RPC client should deal with the IP address changes

  > The current RPC client implementation and the client-side callers assume that the hostname-address mappings of servers never change. The resolved address is stored in an immutable InetSocketAddress object above/outside RPC, and the reconnect logic in the RPC Connection implementation also trusts the resolved address that was passed down.
  > If the NN suffers a failure that requires migration, it may be started on a different node with a different IP address. In this case, even if the name-addre...

- HADOOP-7510. Major improvement reported by daryn and fixed by daryn (security)
  Tokens should use original hostname provided instead of ip

  > Tokens currently store the ip:port of the remote server. This precludes tokens from being used after a host's ip is changed. Tokens should store the hostname used to make the RPC connection. This will enable new processes to use their existing tokens.

- HADOOP-7539. Major bug reported by johnvijoe and fixed by johnvijoe
  merge hadoop archive goodness from trunk to .20

  > hadoop archive in branch-0.20-security is outdated. When run recently, it produced some bugs which were all fixed in trunk. This JIRA aims to bring in all these JIRAs to branch-0.20-security.

- HADOOP-7594. Major new feature reported by szetszwo and fixed by szetszwo
  Support HTTP REST in HttpServer

  > Provide an API in HttpServer for supporting HTTP REST.
  > This is a part of HDFS-2284.

- HADOOP-7596. Major bug reported by eyang and fixed by eyang (build)
  Enable jsvc to work with Hadoop RPM package

  > For secure Hadoop 0.20.2xx cluster, datanode can only run with 32 bit jvm because Hadoop only packages 32 bit jsvc. The build process should download proper jsvc versions base on the build architecture. In addition, the shell script should be enhanced to locate hadoop jar files in the proper location.

- HADOOP-7599. Major bug reported by eyang and fixed by eyang (scripts)
  Improve hadoop setup conf script to setup secure Hadoop cluster

  > Setting up a secure Hadoop cluster requires a lot of manual setup. The motivation of this jira is to provide setup scripts to automate setup secure Hadoop cluster.

- HADOOP-7602. Major bug reported by johnvijoe and fixed by johnvijoe
  wordcount, sort etc on har files fails with NPE

  > wordcount, sort etc on har files fails with NPE@createSocketAddr(NetUtils.java:137).

- HADOOP-7603. Major bug reported by eyang and fixed by eyang
  Set default hdfs, mapred uid, and hadoop group gid for RPM packages

  > Set hdfs, mapred uid, and hadoop uid to fixed numbers. (Eric Yang)

- HADOOP-7610. Major bug reported by eyang and fixed by eyang (scripts)
  /etc/profile.d does not exist on Debian

  > As part of post installation script, there is a symlink created in /etc/profile.d/hadoop-env.sh to source /etc/hadoop/hadoop-env.sh. Therefore, users do not need to configure HADOOP_* environment. Unfortunately, /etc/profile.d only exists in Ubuntu. [Section 9.9 of the Debian Policy|http://www.debian.org/doc/debian-policy/ch-opersys.html#s9.9] states:
  > {quote}
  > A program must not depend on environment variables to get reasonable defaults. (That's because these environment variables would ha...

- HADOOP-7615. Major bug reported by eyang and fixed by eyang (scripts)
  Binary layout does not put share/hadoop/contrib/*.jar into the class path

  > For contrib projects, contrib jar files are not included in HADOOP_CLASSPATH in the binary layout. Several projects jar files should be copied to $HADOOP_PREFIX/share/hadoop/lib for binary deployment. The interesting jar files to include in $HADOOP_PREFIX/share/hadoop/lib are: capacity-scheduler, thriftfs, fairscheduler.

- HADOOP-7625. Major bug reported by owen.omalley and fixed by owen.omalley
  TestDelegationToken is failing in 205

  > After the patches on Friday, org.apache.hadoop.hdfs.security.TestDelegationToken is failing.

- HADOOP-7626. Major bug reported by eyang and fixed by eyang (scripts)
  Allow overwrite of HADOOP_CLASSPATH and HADOOP_OPTS

  > Quote email from Ashutosh Chauhan:
  > bq. There is a bug in hadoop-env.sh which prevents hcatalog server to start in secure settings. Instead of adding classpath, it overrides them. I was not able to verify where the bug belongs to, in HMS or in hadoop scripts. Looks like hadoop-env.sh is generated from hadoop-env.sh.template in installation process by HMS. Hand crafted patch follows:
  > bq. - export HADOOP_CLASSPATH=$f
  > bq. +export HADOOP_CLASSPATH=${HADOOP_CLASSPATH}:$f
  > bq. -export HADOOP_OPTS=...

- HADOOP-7630. Major bug reported by arpitgupta and fixed by eyang (conf)
  hadoop-metrics2.properties should have a property *.period set to a default value foe metrics

  > currently the hadoop-metrics2.properties file does not have a value set for *.period
  > This property is useful for metrics to determine when the property will refresh. We should set it to default of 60

- HADOOP-7631. Major bug reported by rramya and fixed by eyang (conf)
  In mapred-site.xml, stream.tmpdir is mapped to ${mapred.temp.dir} which is undeclared.

  > Streaming jobs seem to fail with the following exception:
  > {noformat}
  > Exception in thread "main" java.io.IOException: No such file or directory
  > at java.io.UnixFileSystem.createFileExclusively(Native Method)
  > at java.io.File.checkAndCreate(File.java:1704)
  > at java.io.File.createTempFile(File.java:1792)
  > at org.apache.hadoop.streaming.StreamJob.packageJobJar(StreamJob.java:603)
  > at org.apache.hadoop.streaming.StreamJob.setJobConf(StreamJob.java:798)
  > a...

- HADOOP-7633. Major bug reported by arpitgupta and fixed by eyang (conf)
  log4j.properties should be added to the hadoop conf on deploy

  > currently the log4j properties are not present in the hadoop conf dir. We should add them so that log rotation happens appropriately and also define other logs that hadoop can generate for example the audit and the auth logs as well as the mapred summary logs etc.

- HADOOP-7637. Major bug reported by eyang and fixed by eyang (build)
  Fair scheduler configuration file is not bundled in RPM

  > 205 build of tar is fine, but rpm failed with:
  > {noformat}
  > [rpm] Processing files: hadoop-0.20.205.0-1
  > [rpm] warning: File listed twice: /usr/libexec
  > [rpm] warning: File listed twice: /usr/libexec/hadoop-config.sh
  > [rpm] warning: File listed twice: /usr/libexec/jsvc.i386
  > [rpm] Checking for unpackaged file(s): /usr/lib/rpm/check-files /tmp/hadoop_package_build_hortonfo/BUILD
  > [rpm] error: Installed (but unpackaged) file(s) found:
  > [rpm] /etc/hadoop/fai...

- HADOOP-7644. Blocker bug reported by owen.omalley and fixed by owen.omalley (security)
  Fix the delegation token tests to use the new style renewers

  > Currently, TestDelegationTokenRenewal and TestDelegationTokenFetcher use the old style renewal and fail.

- HADOOP-7645. Blocker bug reported by atm and fixed by jnp (security)
  HTTP auth tests requiring Kerberos infrastructure are not disabled on branch-0.20-security

  > The back-port of HADOOP-7119 to branch-0.20-security included tests which require Kerberos infrastructure in order to run. In trunk and 0.23, these are disabled unless one enables the {{testKerberos}} maven profile. In branch-0.20-security, these tests are always run regardless, and so fail most of the time.
  > See this Jenkins build for an example: https://builds.apache.org/view/G-L/view/Hadoop/job/Hadoop-0.20-security/26/

- HADOOP-7649. Blocker bug reported by kihwal and fixed by jnp (security, test)
  TestMapredGroupMappingServiceRefresh and TestRefreshUserMappings fail after HADOOP-7625

  > TestMapredGroupMappingServiceRefresh and TestRefreshUserMappings fail after HADOOP-7625.
  > The classpath has been changed, so they try to create the rsrc file in a jar and fail.

- HADOOP-7655. Major improvement reported by arpitgupta and fixed by arpitgupta
  provide a small validation script that smoke tests the installed cluster

  > currently we have scripts that will setup a hadoop cluster, create users etc. We should add a script that will smoke test the installed cluster. The script could run 3 small mr jobs teragen, terasort and teravalidate and cleanup once its done.

- HADOOP-7658. Major bug reported by gkesavan and fixed by eyang
  to fix hadoop config template

  > hadoop rpm config template by default sets the HADOOP_SECURE_DN_USER, HADOOP_SECURE_DN_LOG_DIR & HADOOP_SECURE_DN_PID_DIR
  > the above values should only be set for secured deployment ;
  > # On secure datanodes, user to run the datanode as after dropping privileges
  > export HADOOP_SECURE_DN_USER=${HADOOP_HDFS_USER}
  > # Where log files are stored. $HADOOP_HOME/logs by default.
  > export HADOOP_LOG_DIR=${HADOOP_LOG_DIR}/$USER
  > # Where log files are stored in the secure data environment.
  > export HADOOP_SE...

- HADOOP-7661. Major bug reported by jnp and fixed by jnp
  FileSystem.getCanonicalServiceName throws NPE for any file system uri that doesn't have an authority.

  > FileSystem.getCanonicalServiceName throws NPE for any file system uri that doesn't have an authority.
  > ....
  > java.lang.NullPointerException
  > at org.apache.hadoop.net.NetUtils.createSocketAddr(NetUtils.java:138)
  > at org.apache.hadoop.security.SecurityUtil.buildDTServiceName(SecurityUtil.java:261)
  > at org.apache.hadoop.fs.FileSystem.getCanonicalServiceName(FileSystem.java:174)
  > ....

- HADOOP-7674. Major bug reported by jnp and fixed by jnp
  TestKerberosName fails in 20 branch.

  > TestKerberosName fails in 20 branch. In fact this test has got duplicated in 20, with a little change to the rules.

- HADOOP-7676. Major bug reported by gkesavan and fixed by gkesavan
  add rules to the core-site.xml template

  > add rules for master and region in core-site.xml template.

- HADOOP-7679. Major bug reported by rramya and fixed by rramya (conf)
  log4j.properties templates does not define mapred.jobsummary.logger

  > In templates/conf/hadoop-env.sh, HADOOP_JOBTRACKER_OPTS is defined as -Dsecurity.audit.logger=INFO,DRFAS -Dmapred.audit.logger=INFO,MRAUDIT -Dmapred.jobsummary.logger=INFO,JSA ${HADOOP_JOBTRACKER_OPTS}
  > However, in templates/conf/hadoop-env.sh, instead of mapred.jobsummary.logger, hadoop.mapreduce.jobsummary.logger is defined as follows:
  > hadoop.mapreduce.jobsummary.logger=${hadoop.root.logger}
  > This is preventing collection of jobsummary logs.
  > We have to consistently use mapred.jobsummary.logg...

- HADOOP-7681. Minor bug reported by arpitgupta and fixed by arpitgupta (conf)
  log4j.properties is missing properties for security audit and hdfs audit should be changed to info

  > (Arpit Gupta via Eric Yang)

- HADOOP-7683. Minor bug reported by arpitgupta and fixed by arpitgupta
  hdfs-site.xml template has properties that are not used in 20

  > properties dfs.namenode.http-address and dfs.namenode.https-address should be removed

- HADOOP-7684. Major bug reported by eyang and fixed by eyang (scripts)
  jobhistory server and secondarynamenode should have init.d script

  > Added init.d script for jobhistory server and secondary namenode. (Eric Yang)

- HADOOP-7685. Major bug reported by devaraj.k and fixed by eyang (scripts)
  Issues with hadoop-common-project\hadoop-common\src\main\packages\hadoop-setup-conf.sh file

  > hadoop-common-project\hadoop-common\src\main\packages\hadoop-setup-conf.sh has following issues
  > 1. check_permission does not work as expected if there are two folders with $NAME as part of their name inside $PARENT
  > e.g. /home/hadoop/conf, /home/hadoop/someconf,
  > The result of `ls -ln $PARENT | grep -w $NAME| awk '{print $3}'` is non zero..it is 0 0 and hence the following if check becomes true.
  > {code:xml}
  > if [ "$OWNER" != "0" ]; then
  > RESULT=1
  > break
  > fi
  > {code}
  > 2. Spelling mistake
  > {code:xml}
  > H...

- HADOOP-7691. Major bug reported by gkesavan and fixed by eyang
  hadoop deb pkg should take a diff group id

  > Fixed conflict uid for install packages. (Eric Yang)

- HADOOP-7707. Major improvement reported by arpitgupta and fixed by arpitgupta (conf)
  improve config generator to allow users to specify proxy user, turn append on or off, turn webhdfs on or off

  > Added toggle for dfs.support.append, webhdfs and hadoop proxy user to setup config script. (Arpit Gupta via Eric Yang)

- HADOOP-7708. Critical bug reported by arpitgupta and fixed by eyang (conf)
  config generator does not update the properties file if on exists already

  > Fixed hadoop-setup-conf.sh to handle config file consistently. (Eric Yang)

- HADOOP-7710. Major improvement reported by arpitgupta and fixed by arpitgupta
  create a script to setup application in order to create root directories for application such hbase, hcat, hive etc

- HADOOP-7711. Major bug reported by arpitgupta and fixed by arpitgupta (conf)
  hadoop-env.sh generated from templates has duplicate info

  > Fixed recursive sourcing of HADOOP_OPTS environment variables (Arpit Gupta via Eric Yang)

- HADOOP-7715. Major bug reported by arpitgupta and fixed by eyang (conf)
  see log4j Error when running mr jobs and certain dfs calls

  > Removed unnecessary security logger configuration. (Eric Yang)

- HADOOP-7720. Major improvement reported by arpitgupta and fixed by arpitgupta (conf)
  improve the hadoop-setup-conf.sh to read in the hbase user and setup the configs

  > Added parameter for HBase user to setup config script. (Arpit Gupta via Eric Yang)

- HADOOP-7721. Major bug reported by arpitgupta and fixed by jnp
  dfs.web.authentication.kerberos.principal expects the full hostname and does not replace _HOST with the hostname

- HADOOP-7724. Major bug reported by gkesavan and fixed by arpitgupta
  hadoop-setup-conf.sh should put proxy user info into the core-site.xml

  > Fixed hadoop-setup-conf.sh to put proxy user in core-site.xml. (Arpit Gupta via Eric Yang)

- HDFS-142. Blocker bug reported by rangadi and fixed by dhruba
  In 0.20, move blocks being written into a blocksBeingWritten directory

  > Before 0.18, when Datanode restarts, it deletes files under data-dir/tmp directory since these files are not valid anymore. But in 0.18 it moves these files to normal directory incorrectly making them valid blocks. One of the following would work :
  > - remove the tmp files during upgrade, or
  > - if the files under /tmp are in pre-18 format (i.e. no generation), delete them.
  > Currently effect of this bug is that, these files end up failing block verification and eventually get deleted. But cause...

- HDFS-200. Blocker new feature reported by szetszwo and fixed by dhruba
  In HDFS, sync() not yet guarantees data available to the new readers

  > In the append design doc (https://issues.apache.org/jira/secure/attachment/12370562/Appends.doc), it says
  > * A reader is guaranteed to be able to read data that was 'flushed' before the reader opened the file
  > However, this feature is not yet implemented. Note that the operation 'flushed' is now called "sync".

- HDFS-561. Major sub-task reported by kzhang and fixed by kzhang (data-node, hdfs client)
  Fix write pipeline READ_TIMEOUT

  > When writing a file, the pipeline status read timeouts for datanodes are not set up properly.

- HDFS-606. Major bug reported by shv and fixed by shv (name-node)
  ConcurrentModificationException in invalidateCorruptReplicas()

  > {{BlockManager.invalidateCorruptReplicas()}} iterates over DatanodeDescriptor-s while removing corrupt replicas from the descriptors. This causes {{ConcurrentModificationException}} if there is more than one replicas of the block. I ran into this exception debugging different scenarios in append, but it should be fixed in the trunk too.

- HDFS-630. Major improvement reported by mry.maillist and fixed by clehene (hdfs client, name-node)
  In DFSOutputStream.nextBlockOutputStream(), the client can exclude specific datanodes when locating the next block.

  > created from hdfs-200.
  > If during a write, the dfsclient sees that a block replica location for a newly allocated block is not-connectable, it re-requests the NN to get a fresh set of replica locations of the block. It tries this dfs.client.block.write.retries times (default 3), sleeping 6 seconds between each retry ( see DFSClient.nextBlockOutputStream).
  > This setting works well when you have a reasonable size cluster; if u have few datanodes in the cluster, every retry maybe pick the dead-d...

- HDFS-724. Blocker bug reported by szetszwo and fixed by hairong (data-node, hdfs client)
  Pipeline close hangs if one of the datanode is not responsive.

  > In the new pipeline design, pipeline close is implemented by sending an additional empty packet. If one of the datanode does not response to this empty packet, the pipeline hangs. It seems that there is no timeout.

- HDFS-826. Major improvement reported by dhruba and fixed by dhruba (hdfs client)
  Allow a mechanism for an application to detect that datanode(s) have died in the write pipeline

  > HDFS does not replicate the last block of the file that is being currently written to by an application. Every datanode death in the write pipeline decreases the reliability of the last block of the currently-being-written block. This situation can be improved if the application can be notified of a datanode death in the write pipeline. Then, the application can decide what is the right course of action to be taken on this event.
  > In our use-case, the application can close the file on the fir...

- HDFS-895. Major improvement reported by dhruba and fixed by tlipcon (hdfs client)
  Allow hflush/sync to occur in parallel with new writes to the file

  > In the current trunk, the HDFS client methods writeChunk() and hflush./sync are syncronized. This means that if a hflush/sync is in progress, an applicationn cannot write data to the HDFS client buffer. This reduces the write throughput of the transaction log in HBase.
  > The hflush/sync should allow new writes to happen to the HDFS client even when a hflush/sync is in progress. It can record the seqno of the message for which it should receice the ack, indicate to the DataStream thread to sta...

- HDFS-988. Blocker bug reported by dhruba and fixed by eli (name-node)
  saveNamespace race can corrupt the edits log

  > The adminstrator puts the namenode is safemode and then issues the savenamespace command. This can corrupt the edits log. The problem is that when the NN enters safemode, there could still be pending logSycs occuring from other threads. Now, the saveNamespace command, when executed, would save a edits log with partial writes. I have seen this happen on 0.20.
  > https://issues.apache.org/jira/browse/HDFS-909?focusedCommentId=12828853&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-...

- HDFS-1054. Major improvement reported by tlipcon and fixed by tlipcon (hdfs client)
  Remove unnecessary sleep after failure in nextBlockOutputStream

  > If DFSOutputStream fails to create a pipeline, it currently sleeps 6 seconds before retrying. I don't see a great reason to wait at all, much less 6 seconds (especially now that HDFS-630 ensures that a retry won't go back to the bad node). We should at least make it configurable, and perhaps something like backoff makes some sense.

- HDFS-1057. Blocker sub-task reported by tlipcon and fixed by rash37 (data-node)
  Concurrent readers hit ChecksumExceptions if following a writer to very end of file

  > In BlockReceiver.receivePacket, it calls replicaInfo.setBytesOnDisk before calling flush(). Therefore, if there is a concurrent reader, it's possible to race here - the reader will see the new length while those bytes are still in the buffers of BlockReceiver. Thus the client will potentially see checksum errors or EOFs. Additionally, the last checksum chunk of the file is made accessible to readers even though it is not stable.

- HDFS-1118. Major bug reported by zshao and fixed by zshao
  DFSOutputStream socket leak when cannot connect to DataNode

  > The offending code is in {{DFSOutputStream.nextBlockOutputStream}}
  > This function retries several times to call {{createBlockOutputStream}}. Each time when it fails, it leaves a {{Socket}} object in {{DFSOutputStream.s}}.
  > That object is never closed, but overwritten the next time {{createBlockOutputStream}} is called.

- HDFS-1122. Major sub-task reported by rash37 and fixed by rash37
  client block verification may result in blocks in DataBlockScanner prematurely

  > found that when the DN uses client verification of a block that is open for writing, it will add it to the DataBlockScanner prematurely.

- HDFS-1141. Blocker bug reported by tlipcon and fixed by tlipcon (name-node)
  completeFile does not check lease ownership

  > completeFile should check that the caller still owns the lease of the file that it's completing. This is for the 'testCompleteOtherLeaseHoldersFile' case in HDFS-1139.

- HDFS-1164. Major bug reported by eli and fixed by tlipcon (contrib/hdfsproxy)
  TestHdfsProxy is failing

  > TestHdfsProxy is failing on trunk, seen in HDFS-1132 and HDFS-1143. It doesn't look like hudson posts test results for contrib and it's hard to see what's going on from the raw console output. Can someone with access to hudson upload the individual test output for TestHdfsProxy so we can see what the issue is?

- HDFS-1186. Blocker bug reported by tlipcon and fixed by tlipcon (data-node)
  0.20: DNs should interrupt writers at start of recovery

  > When block recovery starts (eg due to NN recovering lease) it needs to interrupt any writers currently writing to those blocks. Otherwise, an old writer (who hasn't realized he lost his lease) can continue to write+sync to the blocks, and thus recovery ends up truncating data that has been sync()ed.

- HDFS-1197. Major bug reported by tlipcon and fixed by (data-node, hdfs client, name-node)
  Blocks are considered "complete" prematurely after commitBlockSynchronization or DN restart

  > I saw this failure once on my internal Hudson job that runs the append tests 48 times a day:
  > junit.framework.AssertionFailedError: expected:<114688> but was:<98304>
  > at org.apache.hadoop.hdfs.AppendTestUtil.check(AppendTestUtil.java:112)
  > at org.apache.hadoop.hdfs.TestFileAppend3.testTC2(TestFileAppend3.java:116)

- HDFS-1202. Major bug reported by tlipcon and fixed by tlipcon (data-node)
  DataBlockScanner throws NPE when updated before initialized

  > Missing an isInitialized() check in updateScanStatusInternal

- HDFS-1204. Major bug reported by tlipcon and fixed by rash37
  0.20: Lease expiration should recover single files, not entire lease holder

  > This was brought up in HDFS-200 but didn't make it into the branch on Apache.

- HDFS-1207. Major bug reported by tlipcon and fixed by tlipcon (name-node)
  0.20-append: stallReplicationWork should be volatile

  > the stallReplicationWork member in FSNamesystem is accessed by multiple threads without synchronization, but isn't marked volatile. I believe this is responsible for about 1% failure rate on TestFileAppend4.testAppendSyncChecksum* on my 8-core test boxes (looking at logs I see replication happening even though we've supposedly disabled it)

- HDFS-1210. Trivial improvement reported by tlipcon and fixed by tlipcon (hdfs client)
  DFSClient should log exception when block recovery fails

  > Right now we just retry without necessarily showing the exception. It can be useful to see what the error was that prevented the recovery RPC from succeeding.
  > (I believe this only applies in 0.20 style of block recovery)

- HDFS-1211. Minor improvement reported by tlipcon and fixed by tlipcon (data-node)
  0.20 append: Block receiver should not log "rewind" packets at INFO level

  > In the 0.20 append implementation, it logs an INFO level message for every packet that "rewinds" the end of the block file. This is really noisy for applications like HBase which sync every edit.

- HDFS-1218. Critical bug reported by tlipcon and fixed by tlipcon (data-node)
  20 append: Blocks recovered on startup should be treated with lower priority during block synchronization

  > When a datanode experiences power loss, it can come back up with truncated replicas (due to local FS journal replay). Those replicas should not be allowed to truncate the block during block synchronization if there are other replicas from DNs that have _not_ restarted.

- HDFS-1242. Major test reported by tlipcon and fixed by tlipcon
  0.20 append: Add test for appendFile() race solved in HDFS-142

  > This is a unit test that didn't make it into branch-0.20-append, but worth having in TestFileAppend4.

- HDFS-1252. Major test reported by tlipcon and fixed by tlipcon (test)
  TestDFSConcurrentFileOperations broken in 0.20-appendj

  > This test currently has several flaws:
  > - It calls DN.updateBlock with a BlockInfo instance, which then causes java.lang.RuntimeException: java.lang.NoSuchMethodException: org.apache.hadoop.hdfs.server.namenode.BlocksMap$BlockInfo.<init>() in the logs when the DN tries to send blockReceived for the block
  > - It assumes that getBlockLocations returns an up-to-date length block after a sync, which is false. It happens to work because it calls getBlockLocations directly on the NN, and thus gets a...

- HDFS-1260. Critical bug reported by tlipcon and fixed by tlipcon
  0.20: Block lost when multiple DNs trying to recover it to different genstamps

  > Saw this issue on a cluster where some ops people were doing network changes without shutting down DNs first. So, recovery ended up getting started at multiple different DNs at the same time, and some race condition occurred that caused a block to get permanently stuck in recovery mode. What seems to have happened is the following:
  > - FSDataset.tryUpdateBlock called with old genstamp 7091, new genstamp 7094, while the block in the volumeMap (and on filesystem) was genstamp 7093
  > - we find the b...

- HDFS-1346. Major bug reported by hairong and fixed by hairong (data-node, hdfs client)
  DFSClient receives out of order packet ack

  > When running 0.20 patched with HDFS-101, we sometimes see an error as follow:
  > WARN hdfs.DFSClient: DFSOutputStream ResponseProcessor exception for block blk_-2871223654872350746_21421120java.io.IOException: Responseprocessor: Expecting seq
  > no for block blk_-2871223654872350746_21421120 10280 but received 10281
  > at org.apache.hadoop.hdfs.DFSClient$DFSOutputStream$ResponseProcessor.run(DFSClient.java:2570)
  > This indicates that DFS client expects an ack for packet N, but receives an ack for packe...

- HDFS-1520. Major new feature reported by hairong and fixed by hairong (name-node)
  HDFS 20 append: Lightweight NameNode operation to trigger lease recovery

  > Currently HBase uses append to trigger the close of HLog during Hlog split. Append is a very expensive operation, which involves not only NameNode operations but creating a writing pipeline. If one of datanodes on the pipeline has a problem, this recovery may takes minutes. I'd like implement a lightweight NameNode operation to trigger lease recovery and make HBase to use this instead.

- HDFS-1554. Major improvement reported by hairong and fixed by hairong
  Append 0.20: New semantics for recoverLease

  > Change recoverLease API to return if the file is closed or not. It also change the semantics of recoverLease to start lease recovery immediately.

- HDFS-1555. Major improvement reported by hairong and fixed by hairong
  HDFS 20 append: Disallow pipeline recovery if a file is already being lease recovered

  > When a file is under lease recovery and the writer is still alive, the write pipeline will be killed and then the writer will start a pipeline recovery. Sometimes the pipeline recovery may race before the lease recovery and as a result fail the lease recovery. This is very bad if we want to support the strong recoverLease semantics in HDFS-1554. So it would be nice if we could disallow a file's pipeline recovery while its lease recovery is in progress.

- HDFS-1779. Major bug reported by umamaheswararao and fixed by umamaheswararao (data-node, name-node)
  After NameNode restart , Clients can not read partial files even after client invokes Sync.

  > In Append HDFS-200 issue,
  > If file has 10 blocks and after writing 5 blocks if client invokes sync method then NN will persist the blocks information in edits.
  > After this if we restart the NN, All the DataNodes will reregister with NN. But DataNodes are not sending the blocks being written information to NN. DNs are sending the blocksBeingWritten information in DN startup. So, here NameNode can not find that the 5 persisted blocks belongs to which datanodes. This information can build based o...

- HDFS-1836. Major bug reported by hkdennis2k and fixed by bharathm (hdfs client)
  Thousand of CLOSE_WAIT socket

  > $ /usr/sbin/lsof -i TCP:50010 | grep -c CLOSE_WAIT
  > 4471
  > It is better if everything runs normal.
  > However, from time to time there are some "DataStreamer Exception: java.net.SocketTimeoutException" and "DFSClient.processDatanodeError(2507) | Error Recovery for" can be found from log file and the number of CLOSE_WAIT socket just keep increasing
  > The CLOSE_WAIT handles may remain for hours and days; then "Too many open file" some day.

- HDFS-2053. Minor bug reported by miguno and fixed by miguno (name-node)
  Bug in INodeDirectory#computeContentSummary warning

  > *How to reproduce*
  > {code}
  > # create test directories
  > $ hadoop fs -mkdir /hdfs-1377/A
  > $ hadoop fs -mkdir /hdfs-1377/B
  > $ hadoop fs -mkdir /hdfs-1377/C
  > # ...add some test data (few kB or MB) to all three dirs...
  > # set space quota for subdir C only
  > $ hadoop dfsadmin -setSpaceQuota 1g /hdfs-1377/C
  > # the following two commands _on the parent dir_ trigger the warning
  > $ hadoop fs -dus /hdfs-1377
  > $ hadoop fs -count -q /hdfs-1377
  > {code}
  > Warning message in the namenode logs:
  > {code}
  > 2011-06-09 09:42...

- HDFS-2117. Minor bug reported by eli and fixed by eli (data-node)
  DiskChecker#mkdirsWithExistsAndPermissionCheck may return true even when the dir is not created

  > In branch-0.20-security as part of HADOOP-6566, DiskChecker#mkdirsWithExistsAndPermissionCheck will return true even if it wasn't able to create the directory, which means instead of throwing a DiskErrorException the code will proceed to getFileStatus and throw a FNF exception. Post HADOOP-7040, which modified makeInstance to catch not just DiskErrorExceptions but IOExceptions as well, this is not an issue since now the exception is caught either way. But for future modifications we should st...

- HDFS-2190. Major bug reported by atm and fixed by atm (name-node)
  NN fails to start if it encounters an empty or malformed fstime file

  > On startup, the NN reads the fstime file of all the configured dfs.name.dirs to determine which one to load. However, if any of the searched directories contain an empty or malformed fstime file, the NN will fail to start. The NN should be able to just proceed with starting and ignore the directory containing the bad fstime file.

- HDFS-2202. Major new feature reported by eepayne and fixed by eepayne (balancer, data-node)
  Changes to balancer bandwidth should not require datanode restart.

  > New dfsadmin command added: [-setBalancerBandwidth &lt;bandwidth&gt;] where bandwidth is max network bandwidth in bytes per second that the balancer is allowed to use on each datanode during balacing.<br/>
  > This is an incompatible change in 0.23. The versions of ClientProtocol and DatanodeProtocol are changed.

- HDFS-2259. Minor bug reported by eli and fixed by eli (data-node)
  DN web-UI doesn't work with paths that contain html

  > The 20-based DN web UI doesn't work with paths that contain html. The paths need to be unescaped when used to access the file and escaped when printed for navigation.

- HDFS-2284. Major sub-task reported by sanjay.radia and fixed by szetszwo
  Write Http access to HDFS

  > HFTP allows on read access to HDFS via HTTP. Add write HTTP access to HDFS.

- HDFS-2300. Major bug reported by jnp and fixed by jnp
  TestFileAppend4 and TestMultiThreadedSync fail on 20.append and 20-security.

  > TestFileAppend4 and TestMultiThreadedSync fail on the 20.append and 20-security branch.

- HDFS-2309. Major bug reported by jnp and fixed by jnp
  TestRenameWhileOpen fails in branch-0.20-security

  > TestRenameWhileOpen is failing in branch-0.20-security.

- HDFS-2317. Major sub-task reported by szetszwo and fixed by szetszwo
  Read access to HDFS using HTTP REST

- HDFS-2318. Major sub-task reported by szetszwo and fixed by szetszwo
  Provide authentication to webhdfs using SPNEGO

  > Added two new conf properties dfs.web.authentication.kerberos.principal and dfs.web.authentication.kerberos.keytab for the SPNEGO servlet filter.

- HDFS-2320. Major bug reported by sureshms and fixed by sureshms (data-node, hdfs client, name-node)
  Make merged protocol changes from 0.20-append to 0.20-security compatible with previous releases.

  > 0.20-append changes have been merged to 0.20-security. The merge has changes to version numbers in several protocols. This jira makes the protocol changes compatible with older release, allowing clients running older version to talk to server running 205 version and clients running 205 version talk to older servers running 203, 204.

- HDFS-2325. Blocker bug reported by charlescearl and fixed by kihwal (contrib/fuse-dfs, libhdfs)
  Fuse-DFS fails to build on Hadoop 20.203.0

  > In building fuse-dfs, the compile fails due to an argument mismatch between call to hdfsConnectAsUser on line 40 of src/contrib/fuse-dfs/src/fuse_connect.c and an earlier definition of hdfsConnectAsUser given in src/c++/libhdfs/hdfs.h.
  > I suggest changing hdfs.h. I made the following change in hdfs.h in my local copy:
  > 106c106,107
  > < hdfsFS hdfsConnectAsUser(const char* host, tPort port, const char *user);
  > ---
  > > // hdfsFS hdfsConnectAsUser(const char* host, tPort port, const char *us...

- HDFS-2328. Critical bug reported by daryn and fixed by owen.omalley
  hftp throws NPE if security is not enabled on remote cluster

  > If hftp cannot locate either a hdfs or hftp token in the ugi, it will call {{getDelegationToken}} to acquire one from the remote nn. This method may return a null {{Token}} if security is disabled(*) on the remote nn. Hftp will internally call its {{setDelegationToken}} which will throw a NPE when the token is {{null}}.
  > (*) Actually, if any problem happens while acquiring the token it assumes security is disabled! However, it's a pre-existing issue beyond the scope of the token renewal c...

- HDFS-2331. Major bug reported by abhijit.shingate and fixed by abhijit.shingate (hdfs client)
  Hdfs compilation fails

  > I am trying to perform complete build from trunk folder but the compilation fails.
  > *Commandline:*
  > mvn clean install
  > *Error Message:*
  > [ERROR] Failed to execute goal org.apache.maven.plugins:maven-compiler-plugin:2.
  > 3.2:compile (default-compile) on project hadoop-hdfs: Compilation failure
  > [ERROR] \Hadoop\SVN\trunk\hadoop-hdfs-project\hadoop-hdfs\src\main\java\org
  > \apache\hadoop\hdfs\web\WebHdfsFileSystem.java:[209,21] type parameters of <T>T
  > cannot be determined; no unique maximal instance...

- HDFS-2333. Major bug reported by ikelly and fixed by szetszwo
  HDFS-2284 introduced 2 findbugs warnings on trunk

  > When HDFS-2284 was submitted it made DFSOutputStream public which triggered two SC_START_IN_CTOR findbug warnings.

- HDFS-2338. Major sub-task reported by jnp and fixed by jnp
  Configuration option to enable/disable webhdfs.

  > Added a conf property dfs.webhdfs.enabled for enabling/disabling webhdfs.

- HDFS-2340. Major sub-task reported by szetszwo and fixed by szetszwo
  Support getFileBlockLocations and getDelegationToken in webhdfs

- HDFS-2342. Blocker bug reported by kihwal and fixed by szetszwo (build)
  TestSleepJob and TestHdfsProxy broken after HDFS-2284

  > After HDFS-2284, TestSleepJob and TestHdfsProxy are failing.
  > The both work in rev 1167444 and fail in rev 1167663.
  > It will be great if they can be fixed for 205.

- HDFS-2348. Major sub-task reported by szetszwo and fixed by szetszwo
  Support getContentSummary and getFileChecksum in webhdfs

- HDFS-2356. Major sub-task reported by szetszwo and fixed by szetszwo
  webhdfs: support case insensitive query parameter names

- HDFS-2358. Major bug reported by rajsaha and fixed by daryn (name-node)
  NPE when the default filesystem's uri has no authority

  > Give meaningful error message instead of NPE.

- HDFS-2359. Major bug reported by rajsaha and fixed by jeagles (data-node)
  NPE found in Datanode log while Disk failed during different HDFS operation

  > Scenario:
  > I have a cluster of 4 DN ,each of them have 12disks.
  > In hdfs-site.xml I have "dfs.datanode.failed.volumes.tolerated=3"
  > During the execution of distcp (hdfs->hdfs), I am failing 3 disks in one Datanode, by making Data Directory permission 000, The distcp job is successful but , I am getting some NullPointerException in Datanode log
  > In one thread
  > $hadoop distcp /user/$HADOOPQA_USER/data1 /user/$HADOOPQA_USER/data3
  > In another thread in a datanode
  > $ chmod 000 /xyz/{0,1,2}/hadoop/v...

- HDFS-2361. Critical bug reported by rajsaha and fixed by jnp (name-node)
  hftp is broken

  > Distcp with hftp is failing.
  > {noformat}
  > $hadoop distcp hftp://<NNhostname>:50070/user/hadoopqa/1316814737/newtemp 1316814737/as
  > 11/09/23 21:52:33 INFO tools.DistCp: srcPaths=[hftp://<NNhostname>:50070/user/hadoopqa/1316814737/newtemp]
  > 11/09/23 21:52:33 INFO tools.DistCp: destPath=1316814737/as
  > Retrieving token from: https://<NN IP>:50470/getDelegationToken
  > Retrieving token from: https://<NN IP>:50470/getDelegationToken?renewer=mapred
  > 11/09/23 21:52:34 INFO security.TokenCache: Got dt for h...

- HDFS-2366. Major bug reported by arpitgupta and fixed by szetszwo
  webhdfs throws a npe when ugi is null from getDelegationToken

- HDFS-2368. Major bug reported by arpitgupta and fixed by szetszwo
  defaults created for web keytab and principal, these properties should not have defaults

  > the following defaults are set in hdfs-defaults.xml
  > <property>
  > <name>dfs.web.authentication.kerberos.principal</name>
  > <value>HTTP/${dfs.web.hostname}@${kerberos.realm}</value>
  > <description>
  > The HTTP Kerberos principal used by Hadoop-Auth in the HTTP endpoint.
  > The HTTP Kerberos principal MUST start with 'HTTP/' per Kerberos
  > HTTP SPENGO specification.
  > </description>
  > </property>
  > <property>
  > <name>dfs.web.authentication.kerberos.keytab</name>
  > <value>${user.home}/dfs.web....

- HDFS-2373. Major bug reported by arpitgupta and fixed by arpitgupta
  Commands using webhdfs and hftp print unnecessary debug information on the console with security enabled

  > run an hdfs command using either hftp or webhdfs and it prints the following line to the console (system out)
  > Retrieving token from: https://NN_HOST:50470/getDelegationToken
  > Probably in the code where we get the delegation token. This should be removed as people using the dfs commands to get a handle to the content such as dfs -cat will now get an extra line that is not part of the actual content. This should either be only in the log or not logged at all.

- HDFS-2375. Blocker bug reported by sureshms and fixed by sureshms (hdfs client)
  TestFileAppend4 fails in 0.20.205 branch

  > TestFileAppend4 fails due to change from HDFS-2333. The test uses reflection to get to the method DFSOutputStream#getNumCurrentReplicas(). Since HDFS-2333 patch change this method from public to private, reflection get the method fails resulting in test failures.

- HDFS-2385. Major sub-task reported by szetszwo and fixed by szetszwo
  Support delegation token renewal in webhdfs

- HDFS-2392. Critical bug reported by rajsaha and fixed by daryn (name-node)
  Dist with hftp is failing again

  > $ hadoop distcp hftp://<NN Hostname>:50070/user/hadoopqa/input1/part-00000 /user/hadoopqa/out3
  > 11/09/30 18:57:59 INFO tools.DistCp: srcPaths=[hftp://<NN Hostname>:50070/user/hadoopqa/input1/part-00000]
  > 11/09/30 18:57:59 INFO tools.DistCp: destPath=/user/hadoopqa/out3
  > 11/09/30 18:58:00 INFO security.TokenCache: Got dt for
  > hftp://<NN Hostname>:50070/user/hadoopqa/input1/part-00000;uri=<NN IP>:50470;t.service=<NN IP>:50470
  > 11/09/30 18:58:00 INFO hdfs.DFSClient: Created HDFS_DELEGATION_TOKEN toke...

- HDFS-2395. Critical bug reported by arpitgupta and fixed by szetszwo
  webhdfs api's should return a root element in the json response

- HDFS-2403. Major bug reported by szetszwo and fixed by szetszwo
  The renewer in NamenodeWebHdfsMethods.generateDelegationToken(..) is not used

  > Below are some suggestions from Suresh.
  > # renewer not used in #generateDelegationToken
  > # put() does not use InputStream in and should not throw URISyntaxException
  > # post() does not use InputStream in and should not throw URISyntaxException
  > # get() should not throw URISyntaxException

- HDFS-2404. Major bug reported by arpitgupta and fixed by sureshms
  webhdfs liststatus json response is not correct

- HDFS-2408. Blocker bug reported by stack and fixed by stack (hdfs client)
  DFSClient#getNumCurrentReplicas is package private in 205 but public in branch-0.20-append

  > The below commit broke hdfs-826 for hbase in 205 rc1. It changes the accessiblity from public to package private on getNumCurrentReplicas and now current shipping hbase's at least cannot get at this method.
  > {code}
  > Revision 1174483 - (view) (download) (annotate) - [select for diffs]
  > Modified Fri Sep 23 01:30:18 2011 UTC (13 days, 4 hours ago) by szetszwo
  > File length: 136876 byte(s)
  > Diff to previous 1174479 (colored)
  > svn merge -c 1171137 from branch-0.20-security for HDFS-2333.
  > {code}
  > Her...

- HDFS-2411. Major bug reported by arpitgupta and fixed by jnp
  with webhdfs enabled in secure mode the auth to local mappings are not being respected.

- MAPREDUCE-1734. Blocker improvement reported by tomwhite and fixed by tlipcon (documentation)
  Un-deprecate the old MapReduce API in the 0.20 branch

  > This issue is to un-deprecate the "old" MapReduce API (in o.a.h.mapred) in the next 0.20 release, as discussed at http://www.mail-archive.com/mapreduce-dev@hadoop.apache.org/msg01833.html

- MAPREDUCE-2187. Major bug reported by azaroth and fixed by anupamseth
  map tasks timeout during sorting

  > I just committed this. Thanks Anupam!

- MAPREDUCE-2324. Major bug reported by tlipcon and fixed by revans2
  Job should fail if a reduce task can't be scheduled anywhere

  > If there's a reduce task that needs more disk space than is available on any mapred.local.dir in the cluster, that task will stay pending forever. For example, we produced this in a QA cluster by accidentally running terasort with one reducer - since no mapred.local.dir had 1T free, the job remained in pending state for several days. The reason for the "stuck" task wasn't clear from a user perspective until we looked at the JT logs.
  > Probably better to just fail the job if a reduce task goes ...

- MAPREDUCE-2489. Major bug reported by naisbitt and fixed by naisbitt (jobtracker)
  Jobsplits with random hostnames can make the queue unusable

  > We saw an issue where a custom InputSplit was returning invalid hostnames for the splits that were then causing the JobTracker to attempt to excessively resolve host names. This caused a major slowdown for the JobTracker. We should prevent invalid InputSplit hostnames from affecting everyone else.
  > I propose we implement some verification for the hostnames to try to ensure that we only do DNS lookups on valid hostnames (and fail otherwise). We could also fail the job after a certain number...

- MAPREDUCE-2494. Major improvement reported by revans2 and fixed by revans2 (distributed-cache)
  Make the distributed cache delete entires using LRU priority

  > Added config option mapreduce.tasktracker.cache.local.keep.pct to the TaskTracker. It is the target percentage of the local distributed cache that should be kept in between garbage collection runs. In practice it will delete unused distributed cache entries in LRU order until the size of the cache is less than mapreduce.tasktracker.cache.local.keep.pct of the maximum cache size. This is a floating point value between 0.0 and 1.0. The default is 0.95.

- MAPREDUCE-2549. Major bug reported by devaraj.k and fixed by devaraj.k (contrib/eclipse-plugin, contrib/streaming)
  Potential resource leaks in HadoopServer.java, RunOnHadoopWizard.java and Environment.java

- MAPREDUCE-2610. Major bug reported by jrottinghuis and fixed by jrottinghuis (client)
  Inconsistent API JobClient.getQueueAclsForCurrentUser

  > Client needs access to the current user's queue name.
  > Public method JobClient.getQueueAclsForCurrentUser() returns QueueAclsInfo[].
  > The QueueAclsInfo class has default access. A public method should not return a package-private class.
  > The QueueAclsInfo class, its two constructors, getQueueName, and getOperations methods should be public.

- MAPREDUCE-2650. Major bug reported by sherri_chen and fixed by sherri_chen
  back-port MAPREDUCE-2238 to 0.20-security

  > Dev had seen the attempt directory permission getting set to 000 or 111 in the CI builds and tests run on dev desktops with 0.20-security.
  > MAPREDUCE-2238 reported and fixed the issue for 0.22.0, back-port to 0.20-security is needed.

- MAPREDUCE-2705. Major bug reported by tgraves and fixed by tgraves (tasktracker)
  tasks localized and launched serially by TaskLauncher - causing other tasks to be delayed

  > The current TaskLauncher serially launches new tasks one at a time. During the launch it does the localization and then starts the map/reduce task. This can cause any other tasks to be blocked waiting for the current task to be localized and started. In some instances we have seen a task that has a large file to localize (1.2MB) block another task for about 40 minutes. This particular task being blocked was a cleanup task which caused the job to be delayed finishing for the 40 minutes.

- MAPREDUCE-2729. Major improvement reported by sherri_chen and fixed by sherri_chen
  Reducers are always counted having "pending tasks" even if they can't be scheduled yet because not enough of their mappers have completed

  > In capacity scheduler, number of users in a queue needing slots are calculated based on whether users' jobs have any pending tasks.
  > This works fine for map tasks. However, for reduce tasks, jobs do not need reduce slots until the minimum number of map tasks have been completed.
  > Here, we add checking whether reduce is ready to schedule (i.e. if a job has completed enough map tasks) when we increment number of users in a queue needing reduce slots.

- MAPREDUCE-2764. Major bug reported by daryn and fixed by owen.omalley
  Fix renewal of dfs delegation tokens

  > Generalizes token renewal and canceling to a common interface and provides a plugin interface for adding renewers for new kinds of tokens. Hftp changed to store the tokens as HFTP and renew them over http.

- MAPREDUCE-2777. Major new feature reported by jeagles and fixed by amar_kamat
  Backport MAPREDUCE-220 to Hadoop 20 security branch

  > Adds cumulative cpu usage and total heap usage to task counters. This is a backport of <a href="/jira/browse/MAPREDUCE-220" title="Collecting cpu and memory usage for MapReduce tasks"><strike>MAPREDUCE-220</strike></a> and <a href="/jira/browse/MAPREDUCE-2469" title="Task counters should also report the total heap usage of the task"><strike>MAPREDUCE-2469</strike></a>.

- MAPREDUCE-2780. Major sub-task reported by daryn and fixed by daryn
  Standardize the value of token service

  > The token's service field must (currently) be set to "ip:port". All the producers of a token are independently building the service string. This should be done via a common method to reduce the chance of error, and to facilitate the field value being easily changed in the (near) future.

- MAPREDUCE-2852. Major bug reported by eli and fixed by kihwal (tasktracker)
  Jira for YDH bug 2854624

  > The DefaultTaskController and LinuxTaskController reference Yahoo! internal bug 2854624:
  > {code}
  > FileSystem rawFs = FileSystem.getLocal(getConf()).getRaw();
  > long logSize = 0; //TODO: Ref BUG:2854624
  > {code}
  > This jira tracks this TODO. If someone w/ access to Yahoo's bugzilla could update this jira with what the bug is that would be great.

- MAPREDUCE-2915. Major bug reported by kihwal and fixed by kihwal (task-controller)
  LinuxTaskController does not work when JniBasedUnixGroupsNetgroupMapping or JniBasedUnixGroupsMapping is enabled

  > When a job is submitted, LinuxTaskController launches the native task-controller binary for job initialization. The native program does a series of prep work and call execv() to run JobLocalizer. It was observed that JobLocalizer does fails to run when JniBasedUnixGroupsNetgroupMapping or JniBasedUnixGroupsMapping is enabled, resulting in 100% job failures.
  > JobLocalizer normally does not need the native library (libhadoop) for its functioning, but enabling a JNI user-to-group mapping functi...

- MAPREDUCE-2928. Major sub-task reported by eli and fixed by eli (tasktracker)
  MR-2413 improvements

  > Tracks improvements to MR-2413. See [this comment|https://issues.apache.org/jira/browse/MAPREDUCE-2413?focusedCommentId=13095073&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-13095073].

- MAPREDUCE-2981. Major improvement reported by matei and fixed by matei (contrib/fair-share)
  Backport trunk fairscheduler to 0.20-security branch

  > A lot of improvements have been made to the fair scheduler in 0.21, 0.22 and trunk, but have not been ported back to the new 0.20.20X releases that are currently considered the stable branch of Hadoop.

- MAPREDUCE-3076. Blocker bug reported by acmurthy and fixed by acmurthy (test)
  TestSleepJob fails

  > TestSleepJob fails, it was intended to be used in other tests for MAPREDUCE-2981.

- MAPREDUCE-3081. Major bug reported by vitthal_gogate and fixed by (contrib/vaidya)
  Change the name format for hadoop core and vaidya jar to be hadoop-{core/vaidya}-{version}.jar in vaidya.sh

  > contrib/vaidya/bin/vaidya.sh script fixed to use appropriate jars and classpath

- MAPREDUCE-3112. Major bug reported by eyang and fixed by eyang (contrib/streaming)
  Calling hadoop cli inside mapreduce job leads to errors

  > Removed inheritance of certain server environment variables (HADOOP_OPTS and HADOOP_ROOT_LOGGER) in task attempt process. <br/>

## Changes since Hadoop 0.20.203.0

- MAPREDUCE-2846. Blocker bug reported by aw and fixed by owen.omalley (task, task-controller, tasktracker)
  a small % of all tasks fail with DefaultTaskController

  > Fixed a race condition in writing the log index file that caused tasks to 'fail'.

- MAPREDUCE-2804. Blocker bug reported by aw and fixed by owen.omalley
  "Creation of symlink to attempt log dir failed." message is not useful

  > Removed duplicate chmods of job log dir that were vulnerable to race conditions between tasks. Also improved the messages when the symlinks failed to be created.

- MAPREDUCE-2651. Major bug reported by bharathm and fixed by bharathm (task-controller)
  Race condition in Linux Task Controller for job log directory creation

  > There is a rare race condition in linux task controller when concurrent task processes tries to create job log directory at the same time.

- MAPREDUCE-2621. Minor bug reported by sherri_chen and fixed by sherri_chen
  TestCapacityScheduler fails with "Queue "q1" does not exist"

  > {quote}
  > Error Message
  > Queue "q1" does not exist
  > Stacktrace
  > java.io.IOException: Queue "q1" does not exist
  > at org.apache.hadoop.mapred.JobInProgress.<init>(JobInProgress.java:354)
  > at org.apache.hadoop.mapred.TestCapacityScheduler$FakeJobInProgress.<init>(TestCapacityScheduler.java:172)
  > at org.apache.hadoop.mapred.TestCapacityScheduler.submitJob(TestCapacityScheduler.java:794)
  > at org.apache.hadoop.mapred.TestCapacityScheduler.submitJob(TestCapacityScheduler.java:818)
  > at org.apache.hadoop.mapred.TestCapacityScheduler.submitJobAndInit(TestCapacityScheduler.java:825)
  > at org.apache.hadoop.mapred.TestCapacityScheduler.testMultiTaskAssignmentInMultipleQueues(TestCapacityScheduler.java:1109)
  > {quote}
  > When queue name is invalid, an exception is thrown now.

- MAPREDUCE-2558. Major new feature reported by naisbitt and fixed by naisbitt (jobtracker)
  Add queue-level metrics 0.20-security branch

  > We would like to record and present the jobtracker metrics on a per-queue basis.

- MAPREDUCE-2555. Minor bug reported by tgraves and fixed by tgraves (tasktracker)
  JvmInvalidate errors in the gridmix TT logs

  > Observing a lot of jvmValidate exceptions in TT logs for grid mix run
  > ************************
  > 2011-04-28 02:00:37,578 INFO org.apache.hadoop.ipc.Server: IPC Server handler 7 on 46121, call
  > statusUpdate(attempt_201104270735_5993_m_003305_0, org.apache.hadoop.mapred.MapTaskStatus@1840a9c,
  > org.apache.hadoop.mapred.JvmContext@1d4ab6b) from 127.0.0.1:50864: error: java.io.IOException: JvmValidate Failed.
  > Ignoring request from task: attempt_201104270735_5993_m_003305_0, with JvmId:
  > jvm_201104270735_5993_m_103399012gsbl20430: java.io.IOException: JvmValidate Failed. Ignoring request from task:
  > attempt_201104270735_5993_m_003305_0, with JvmId: jvm_201104270735_5993_m_103399012gsbl20430: --
  > at org.apache.hadoop.ipc.Server$Handler$1.run(Server.java:1386)
  > at java.security.AccessController.doPrivileged(Native Method)
  > at javax.security.auth.Subject.doAs(Subject.java:396)
  > at org.apache.hadoop.security.UserGroupInformation.doAs(UserGroupInformation.java:1059)
  > at org.apache.hadoop.ipc.Server$Handler.run(Server.java:1384)
  > *********************

- MAPREDUCE-2529. Major bug reported by tgraves and fixed by tgraves (tasktracker)
  Recognize Jetty bug 1342 and handle it

  > Added 2 new config parameters:
  > mapreduce.reduce.shuffle.catch.exception.stack.regex
  > mapreduce.reduce.shuffle.catch.exception.message.regex

- MAPREDUCE-2524. Minor improvement reported by tgraves and fixed by tgraves (tasktracker)
  Backport trunk heuristics for failing maps when we get fetch failures retrieving map output during shuffle

  > Added a new configuration option: mapreduce.reduce.shuffle.maxfetchfailures, and removed a no longer used option: mapred.reduce.copy.backoff.

- MAPREDUCE-2514. Trivial bug reported by jeagles and fixed by jeagles (tasktracker)
  ReinitTrackerAction class name misspelled RenitTrackerAction in task tracker log

- MAPREDUCE-2495. Minor improvement reported by revans2 and fixed by revans2 (distributed-cache)
  The distributed cache cleanup thread has no monitoring to check to see if it has died for some reason

  > The cleanup thread in the distributed cache handles IOExceptions and the like correctly, but just to be a bit more defensive it would be good to monitor the thread, and check that it is still alive regularly, so that the distributed cache does not fill up the entire disk on the node.

- MAPREDUCE-2490. Trivial improvement reported by jeagles and fixed by jeagles (jobtracker)
  Log blacklist debug count

  > Gain some insight into blacklist increments/decrements by enhancing the debug logging

- MAPREDUCE-2479. Major improvement reported by revans2 and fixed by revans2 (tasktracker)
  Backport MAPREDUCE-1568 to hadoop security branch

  > Added mapreduce.tasktracker.distributedcache.checkperiod to the task tracker that defined the period to wait while cleaning up the distributed cache. The default is 1 min.

- MAPREDUCE-2456. Trivial improvement reported by naisbitt and fixed by naisbitt (jobtracker)
  Show the reducer taskid and map/reduce tasktrackers for "Failed fetch notification #_ for task attempt..." log messages

  > This jira is to provide more useful log information for debugging the "Too many fetch-failures" error.
  > Looking at the JobTracker node, we see messages like this:
  > "2010-12-14 00:00:06,911 INFO org.apache.hadoop.mapred.JobInProgress: Failed fetch notification #8 for task
  > attempt_201011300729_189729_m_007458_0".
  > I would be useful to see which reducer is reporting the error here.
  > So, I propose we add the following to these log messages:
  > 1. reduce task ID
  > 2. TaskTracker nodenames for both the mapper and the reducer

- MAPREDUCE-2451. Trivial bug reported by tgraves and fixed by tgraves (jobtracker)
  Log the reason string of healthcheck script

  > The information on why a specific TaskTracker got blacklisted is not stored anywhere. The jobtracker web ui will show the detailed reason string until the TT gets unblacklisted. After that it is lost.

- MAPREDUCE-2447. Minor bug reported by sseth and fixed by sseth
  Set JvmContext sooner for a task - MR2429

  > TaskTracker.validateJVM() is throwing NPE when setupWorkDir() throws IOException. This is because
  > taskFinal.setJvmContext() is not executed yet

- MAPREDUCE-2443. Minor bug reported by sseth and fixed by sseth (test)
  Fix FI build - broken after MR-2429

  > src/test/system/aop/org/apache/hadoop/mapred/TaskAspect.aj:72 [warning] advice defined in org.apache.hadoop.mapred.TaskAspect has not been applied [Xlint:adviceDidNotMatch]
  > After the fix in MR-2429, the call to ping in TaskAspect needs to be fixed.

- MAPREDUCE-2429. Major bug reported by acmurthy and fixed by sseth (tasktracker)
  Check jvmid during task status report

  > Currently TT doens't check to ensure jvmid is relevant during communication with the Child via TaskUmbilicalProtocol.

- MAPREDUCE-2418. Minor bug reported by sseth and fixed by sseth
  Errors not shown in the JobHistory servlet (specifically Counter Limit Exceeded)

  > Job error details are not displayed in the JobHistory servlet. e.g. Errors like 'Counter limit exceeded for a job'.
  > jobdetails.jsp has 'Failure Info', but this is missing in jobdetailshistory.jsp

- MAPREDUCE-2415. Major sub-task reported by bharathm and fixed by bharathm (task-controller, tasktracker)
  Distribute TaskTracker userlogs onto multiple disks

  > Currently, userlogs directory in TaskTracker is placed under hadoop.log.dir like <hadoop.log.dir>/userlogs. I am proposing to spread these userlogs onto multiple configured mapred.local.dirs to strengthen TaskTracker reliability w.r.t disk failures.

- MAPREDUCE-2413. Major sub-task reported by bharathm and fixed by ravidotg (task-controller, tasktracker)
  TaskTracker should handle disk failures at both startup and runtime

  > At present, TaskTracker doesn't handle disk failures properly both at startup and runtime.
  > (1) Currently TaskTracker doesn't come up if any of the mapred-local-dirs is on a bad disk. TaskTracker should ignore that particular mapred-local-dir and start up and use only the remaining good mapred-local-dirs.
  > (2) If a disk goes bad while TaskTracker is running, currently TaskTracker doesn't do anything special. This results in either
  > (a) TaskTracker continues to "try to use that bad disk" and this results in lots of task failures and possibly job failures(because of multiple TTs having bad disks) and eventually these TTs getting graylisted for all jobs. And this needs manual restart of TT with modified configuration of mapred-local-dirs avoiding the bad disk. OR
  > (b) Health check script identifying the disk as bad and the TT gets blacklisted. And this also needs manual restart of TT with modified configuration of mapred-local-dirs avoiding the bad disk.
  > This JIRA is to make TaskTracker more fault-tolerant to disk failures solving (1) and (2). i.e. TT should start even if at least one of the mapred-local-dirs is on a good disk and TT should adjust its in-memory list of mapred-local-dirs and avoid using bad mapred-local-dirs.

- MAPREDUCE-2411. Minor bug reported by dking and fixed by dking
  When you submit a job to a queue with no ACLs you get an inscrutible NPE

  > With this patch we'll check for that, and print a message in the logs. Then at submission time you find out about it.

- MAPREDUCE-2409. Major bug reported by sseth and fixed by sseth (distributed-cache)
  Distributed Cache does not differentiate between file /archive for files with the same path

  > If a 'global' file is specified as a 'file' by one job - subsequent jobs cannot override this source file to be an 'archive' (until the TT cleans up it's cache or a TT restart).
  > The other way around as well -> 'archive' to 'file'
  > In case of an accidental submission using the wrong type - some of the tasks for the second job will end up seeing the source file as an archive, others as a file.

- MAPREDUCE-2366. Major bug reported by owen.omalley and fixed by dking (tasktracker)
  TaskTracker can't retrieve stdout and stderr from web UI

  > Problem where the task browser UI can't retrieve the stdxxx printouts of streaming jobs that abend in the unix code, in the common case where the containing job doesn't reuse JVM's.

- MAPREDUCE-2364. Major bug reported by owen.omalley and fixed by devaraj (tasktracker)
  Shouldn't hold lock on rjob while localizing resources.

  > There is a deadlock while localizing resources on the TaskTracker.

- MAPREDUCE-2362. Major bug reported by owen.omalley and fixed by roelofs (test)
  Unit test failures: TestBadRecords and TestTaskTrackerMemoryManager

  > Fix unit-test failures: TestBadRecords (NPE due to rearranged MapTask code) and TestTaskTrackerMemoryManager (need hostname in output-string pattern).

- MAPREDUCE-2360. Major bug reported by owen.omalley and fixed by (client)
  Pig fails when using non-default FileSystem

  > The job client strips the file system from the user's job jar, which causes breakage when it isn't the default file system.

- MAPREDUCE-2359. Major bug reported by owen.omalley and fixed by ramach
  Distributed cache doesn't use non-default FileSystems correctly

  > We are passing fs.deafult.name as viewfs:/// in core site.xml on oozie server.
  > We have default name node in configuration also viewfs:///
  > We are using hdfs://path in our path for application.
  > Its giving following error:
  > IllegalArgumentException: Wrong FS:
  > hdfs://nn/user/strat_ci/oozie-oozi/0000002-110217014830452-oozie-oozi-W/hadoop1--map-reduce/map-reduce-launcher.jar,
  > expected: viewfs:/

- MAPREDUCE-2358. Major bug reported by owen.omalley and fixed by ramach
  MapReduce assumes HDFS as the default filesystem

  > Mapred assumes hdfs as the default fs even when defined otherwise.

- MAPREDUCE-2357. Major bug reported by owen.omalley and fixed by vicaya (task)
  When extending inputsplit (non-FileSplit), all exceptions are ignored

  > if you're using a custom RecordReader/InputFormat setup and using an
  > InputSplit that does NOT extend FileSplit, then any exceptions you throw in your RecordReader.nextKeyValue() function
  > are silently ignored.

- MAPREDUCE-2356. Major bug reported by owen.omalley and fixed by vicaya
  A task succeeded even though there were errors on all attempts.

  > From Luke Lu:
  > Here is a summary of why the failed map task was considered "successful" (Thanks to Mahadev, Arun and Devaraj
  > for insightful discussions).
  > 1. The map task was hanging BEFORE being initialized (probably in localization, but it doesn't matter in this case).
  > Its state is UNASSIGNED.
  > 2. The jt decided to kill it due to timeout and scheduled a cleanup task on the same node.
  > 3. The cleanup task has the same attempt id (by design.) but runs in a different JVM. Its initial state is
  > FAILED_UNCLEAN.
  > 4. The JVM of the original attempt is getting killed, while proceeding to setupWorkDir and throwed an
  > IllegalStateException while FileSystem.getLocal, which causes taskFinal.taskCleanup being called in Child, and
  > triggered the NPE due to the task is not yet initialized (committer is null). Before the NPE, however it sent a
  > statusUpdate to TT, and in tip.reportProgress, changed the task state (currently FAILED_UNCLEAN) to UNASSIGNED.
  > 5. The cleanup attempt succeeded and report done to TT. In tip.reportDone, the isCleanup() check returned false due to
  > the UNASSIGNED state and set the task state as SUCCEEDED.

- MAPREDUCE-517. Critical bug reported by acmurthy and fixed by acmurthy
  The capacity-scheduler should assign multiple tasks per heartbeat

  > HADOOP-3136 changed the default o.a.h.mapred.JobQueueTaskScheduler to assign multiple tasks per TaskTracker heartbeat, the capacity-scheduler should do the same.

- MAPREDUCE-118. Blocker bug reported by amar_kamat and fixed by amareshwari (client)
  Job.getJobID() will always return null

  > JobContext is used for a read-only view of job's info. Hence all the readonly fields in JobContext are set in the constructor. Job extends JobContext. When a Job is created, jobid is not known and hence there is no way to set JobID once Job is created. JobID is obtained only when the JobClient queries the jobTracker for a job-id., which happens later i.e upon job submission.

- HDFS-2218. Blocker test reported by mattf and fixed by mattf (contrib/hdfsproxy, test)
  Disable TestHdfsProxy.testHdfsProxyInterface in automated test suite for 0.20-security-204 release

  > Test case TestHdfsProxy.testHdfsProxyInterface has been temporarily disabled for this release, due to failure in the Hudson automated test environment.

- HDFS-2057. Major bug reported by bharathm and fixed by bharathm (data-node)
  Wait time to terminate the threads causing unit tests to take longer time

  > As a part of datanode process hang, this part of code was introduced in 0.20.204 to clean up all the waiting threads.
  > - try {
  > - readPool.awaitTermination(10, TimeUnit.SECONDS);
  > - } catch (InterruptedException e) {
  > - LOG.info("Exception occured in doStop:" + e.getMessage());
  > - }
  > - readPool.shutdownNow();
  > This was clearly meant for production, but all the unit tests uses minidfscluster and minimrcluster for shutdown which waits on this part of the code. Due to this, we saw increase in unit test run times. So removing this code.

- HDFS-2044. Major test reported by mattf and fixed by mattf (test)
  TestQueueProcessingStatistics failing automatic test due to timing issues

  > The test makes assumptions about timing issues that hold true in workstation environments but not in Hudson auto-test.

- HDFS-2023. Major bug reported by bharathm and fixed by bharathm (data-node)
  Backport of NPE for File.list and File.listFiles

  > Since we have multiple Jira's in trunk for common and hdfs, I am creating another jira for this issue.
  > This patch addresses the following:
  > 1. Provides FileUtil API for list and listFiles which throws IOException for null cases.
  > 2. Replaces most of the code where JDK file API with FileUtil API.

- HDFS-1878. Minor bug reported by mattf and fixed by mattf (name-node)
  TestHDFSServerPorts unit test failure - race condition in FSNamesystem.close() causes NullPointerException without serious consequence

  > In 20.204, TestHDFSServerPorts was observed to intermittently throw a NullPointerException. This only happens when FSNamesystem.close() is called, which means system termination for the Namenode, so this is not a serious bug for .204. TestHDFSServerPorts is more likely than normal execution to stimulate the race, because it runs two Namenodes in the same JVM, causing more interleaving and more potential to see a race condition.
  > The race is in FSNamesystem.close(), line 566, we have:
  > if (replthread != null) replthread.interrupt();
  > if (replmon != null) replmon = null;
  > Since the interrupted replthread is not waited on, there is a potential race condition with replmon being nulled before replthread is dead, but replthread references replmon in computeDatanodeWork() where the NullPointerException occurs.
  > The solution is either to wait on replthread or just don't null replmon. The latter is preferred, since none of the sibling Namenode processing threads are waited on in close().
  > I'll attach a patch for .205.

- HDFS-1822. Blocker bug reported by sureshms and fixed by sureshms (name-node)
  Editlog opcodes overlap between 20 security and later releases

  > Same opcode are used for different operations between 0.20.security, 0.22 and 0.23. This results in failure to load editlogs on later release, especially during upgrades.

- HDFS-1773. Minor improvement reported by tanping and fixed by tanping (name-node)
  Remove a datanode from cluster if include list is not empty and this datanode is removed from both include and exclude lists

  > Our service engineering team who operates the clusters on a daily basis founds it is confusing that after a data node is decommissioned, there is no way to make the cluster forget about this data node and it always remains in the dead node list.

- HDFS-1767. Major sub-task reported by mattf and fixed by mattf (data-node)
  Namenode should ignore non-initial block reports from datanodes when in safemode during startup

  > Consider a large cluster that takes 40 minutes to start up. The datanodes compete to register and send their Initial Block Reports (IBRs) as fast as they can after startup (subject to a small sub-two-minute random delay, which isn't relevant to this discussion).
  > As each datanode succeeds in sending its IBR, it schedules the starting time for its regular cycle of reports, every hour (or other configured value of dfs.blockreport.intervalMsec). In order to spread the reports evenly across the block report interval, each datanode picks a random fraction of that interval, for the starting point of its regular report cycle. For example, if a particular datanode ends up randomly selecting 18 minutes after the hour, then that datanode will send a Block Report at 18 minutes after the hour every hour as long as it remains up. Other datanodes will start their cycles at other randomly selected times. This code is in DataNode.blockReport() and DataNode.scheduleBlockReport().
  > The "second Block Report" (2BR), is the start of these hourly reports. The problem is that some of these 2BRs get scheduled sooner rather than later, and actually occur within the startup period. For example, if the cluster takes 40 minutes (2/3 of an hour) to start up, then out of the datanodes that succeed in sending their IBRs during the first 10 minutes, between 1/2 and 2/3 of them will send their 2BR before the 40-minute startup time has completed!
  > 2BRs sent within the startup time actually compete with the remaining IBRs, and thereby slow down the overall startup process. This can be seen in the following data, which shows the startup process for a 3700-node cluster that took about 17 minutes to finish startup:
  > {noformat}
  > time starts sum regs sum IBR sum 2nd_BR sum total_BRs/min
  > 0 1299799498 3042 3042 1969 1969 151 151 0 151
  > 1 1299799558 665 3707 1470 3439 248 399 0 248
  > 2 1299799618 3707 224 3663 270 669 0 270
  > 3 1299799678 3707 14 3677 261 930 3 3 264
  > 4 1299799738 3707 23 3700 288 1218 1 4 289
  > 5 1299799798 3707 7 3707 258 1476 3 7 261
  > 6 1299799858 3707 3707 317 1793 4 11 321
  > 7 1299799918 3707 3707 292 2085 6 17 298
  > 8 1299799978 3707 3707 292 2377 8 25 300
  > 9 1299800038 3707 3707 272 2649 25 272
  > 10 1299800098 3707 3707 280 2929 15 40 295
  > 11 1299800158 3707 3707 223 3152 14 54 237
  > 12 1299800218 3707 3707 143 3295 54 143
  > 13 1299800278 3707 3707 141 3436 20 74 161
  > 14 1299800338 3707 3707 195 3631 78 152 273
  > 15 1299800398 3707 3707 51 3682 209 361 260
  > 16 1299800458 3707 3707 25 3707 369 730 394
  > 17 1299800518 3707 3707 3707 166 896 166
  > 18 1299800578 3707 3707 3707 72 968 72
  > 19 1299800638 3707 3707 3707 67 1035 67
  > 20 1299800698 3707 3707 3707 75 1110 75
  > 21 1299800758 3707 3707 3707 71 1181 71
  > 22 1299800818 3707 3707 3707 67 1248 67
  > 23 1299800878 3707 3707 3707 62 1310 62
  > 24 1299800938 3707 3707 3707 56 1366 56
  > 25 1299800998 3707 3707 3707 60 1426 60
  > {noformat}
  > This data was harvested from the startup logs of all the datanodes, and correlated into one-minute buckets. Each row of the table represents the progress during one elapsed minute of clock time. It seems that every cluster startup is different, but this one showed the effect fairly well.
  > The "starts" column shows that all the nodes started up within the first 2 minutes, and the "regs" column shows that all succeeded in registering by minute 6. The IBR column shows a sustained rate of Initial Block Report processing of 250-300/minute for the first 10 minutes.
  > The question is why, during minutes 11 through 16, the rate of IBR processing slowed down. Why didn't the startup just finish? In the "2nd_BR" column, we see the rate of 2BRs ramping up as more datanodes complete their IBRs. As the rate increases, they become more effective at competing with the IBRs, and slow down the IBR processing even more. After the IBRs finally finish in minute 16, the rate of 2BRs settles down to a steady ~60-70/minute.
  > In order to decrease competition for locks and other resources, to speed up IBR processing during startup, we propose to delay 2BRs until later into the cycle.

- HDFS-1758. Minor bug reported by tanping and fixed by tanping (tools)
  Web UI JSP pages thread safety issue

  > The set of JSP pages that web UI uses are not thread safe. We have observed some problems when requesting Live/Dead/Decommissioning pages from the web UI, incorrect page is displayed. To be more specific, requesting Dead node list page, sometimes, Live node page is returned. Requesting decommissioning page, sometimes, dead page is returned.
  > The root cause of this problem is that JSP page is not thread safe by default. When multiple requests come in, each request is assigned to a different thread, multiple threads access the same instance of the servlet class resulted from a JSP page. A class variable is shared by multiple threads. The JSP code in 20 branche, for example, dfsnodelist.jsp has
  > {code}
  > <!%
  > int rowNum = 0;
  > int colNum = 0;
  > String sorterField = null;
  > String sorterOrder = null;
  > String whatNodes = "LIVE";
  > ...
  > %>
  > {code}
  > declared as class variables. ( These set of variables are declared within <%! code %> directives which made them class members. ) Multiple threads share the same set of class member variables, one request would step on anther's toe.
  > However, due to the JSP code refactor, HADOOP-5857, all of these class member variables are moved to become function local variables. So this bug does not appear in Apache trunk. Hence, we have proposed to take a simple fix for this bug on 20 branch alone, to be more specific, branch-0.20-security.
  > The simple fix is to add jsp ThreadSafe="false" directive into the related JSP pages, dfshealth.jsp and dfsnodelist.jsp to make them thread safe, i.e. only on request is processed at each time.
  > We did evaluate the thread safety issue for other JSP pages on trunk, we noticed a potential problem is that when we retrieving some statistics from namenode, for example, we make the call to
  > {code}
  > NamenodeJspHelper.getInodeLimitText(fsn);
  > {code}
  > in dfshealth.jsp, which eventuality is
  > {code}
  > static String getInodeLimitText(FSNamesystem fsn) {
  > long inodes = fsn.dir.totalInodes();
  > long blocks = fsn.getBlocksTotal();
  > long maxobjects = fsn.getMaxObjects();
  > ....
  > {code}
  > some of the function calls are already guarded by readwritelock, e.g. dir.totalInodes, but others are not. As a result of this, the web ui results are not 100% thread safe. But after evaluating the prons and cons of adding a giant lock into the JSP pages, we decided not to issue FSNamesystem ReadWrite locks into JSPs.

- HDFS-1750. Major bug reported by szetszwo and fixed by szetszwo
  fs -ls hftp://file not working

  > {noformat}
  > hadoop dfs -touchz /tmp/file1 # create file. OK
  > hadoop dfs -ls /tmp/file1 # OK
  > hadoop dfs -ls hftp://namenode:50070/tmp/file1 # FAILED: not seeing the file
  > {noformat}

- HDFS-1692. Major bug reported by bharathm and fixed by bharathm (data-node)
  In secure mode, Datanode process doesn't exit when disks fail.

  > In secure mode, when disks fail more than volumes tolerated, datanode process doesn't exit properly and it just hangs even though shutdown method is called.

- HDFS-1592. Major bug reported by bharathm and fixed by bharathm
  Datanode startup doesn't honor volumes.tolerated

  > Datanode startup doesn't honor volumes.tolerated for hadoop 20 version.

- HDFS-1541. Major sub-task reported by hairong and fixed by hairong (name-node)
  Not marking datanodes dead When namenode in safemode

  > In a big cluster, when namenode starts up, it takes a long time for namenode to process block reports from all datanodes. Because heartbeats processing get delayed, some datanodes are erroneously marked as dead, then later on they have to register again, thus wasting time.
  > It would speed up starting time if the checking of dead nodes is disabled when namenode in safemode.

- HDFS-1445. Major sub-task reported by mattf and fixed by mattf (data-node)
  Batch the calls in DataStorage to FileUtil.createHardLink(), so we call it once per directory instead of once per file

  > Batch hardlinking during "upgrade" snapshots, cutting time from aprx 8 minutes per volume to aprx 8 seconds. Validated in both Linux and Windows. Depends on prior integration with patch for HADOOP-7133.

- HDFS-1377. Blocker bug reported by eli and fixed by eli (name-node)
  Quota bug for partial blocks allows quotas to be violated

  > There's a bug in the quota code that causes them not to be respected when a file is not an exact multiple of the block size. Here's an example:
  > {code}
  > $ hadoop fs -mkdir /test
  > $ hadoop dfsadmin -setSpaceQuota 384M /test
  > $ ls dir/ | wc -l # dir contains 101 files
  > 101
  > $ du -ms dir # each is 3mb
  > 304 dir
  > $ hadoop fs -put dir /test
  > $ hadoop fs -count -q /test
  > none inf 402653184 -550502400 2 101 317718528 hdfs://haus01.sf.cloudera.com:10020/test
  > $ hadoop fs -stat "%o %r" /test/dir/f30
  > 134217728 3 # three 128mb blocks
  > {code}
  > INodeDirectoryWithQuota caches the number of bytes consumed by it's children in {{diskspace}}. The quota adjustment code has a bug that causes {{diskspace}} to get updated incorrectly when a file is not an exact multiple of the block size (the value ends up being negative).
  > This causes the quota checking code to think that the files in the directory consumes less space than they actually do, so the verifyQuota does not throw a QuotaExceededException even when the directory is over quota. However the bug isn't visible to users because {{fs count -q}} reports the numbers generated by INode#getContentSummary which adds up the sizes of the blocks rather than use the cached INodeDirectoryWithQuota#diskspace value.
  > In FSDirectory#addBlock the disk space consumed is set conservatively to the full block size * the number of replicas:
  > {code}
  > updateCount(inodes, inodes.length-1, 0,
  > fileNode.getPreferredBlockSize()*fileNode.getReplication(), true);
  > {code}
  > In FSNameSystem#addStoredBlock we adjust for this conservative estimate by subtracting out the difference between the conservative estimate and what the number of bytes actually stored was:
  > {code}
  > //Updated space consumed if required.
  > INodeFile file = (storedBlock != null) ? storedBlock.getINode() : null;
  > long diff = (file == null) ? 0 :
  > (file.getPreferredBlockSize() - storedBlock.getNumBytes());
  > if (diff > 0 && file.isUnderConstruction() &&
  > cursize < storedBlock.getNumBytes()) {
  > ...
  > dir.updateSpaceConsumed(path, 0, -diff*file.getReplication());
  > {code}
  > We do the same in FSDirectory#replaceNode when completing the file, but at a file granularity (I believe the intent here is to correct for the cases when there's a failure replicating blocks and recovery). Since oldnode is under construction INodeFile#diskspaceConsumed will use the preferred block size (vs of Block#getNumBytes used by newnode) so we will again subtract out the difference between the full block size and what the number of bytes actually stored was:
  > {code}
  > long dsOld = oldnode.diskspaceConsumed();
  > ...
  > //check if disk space needs to be updated.
  > long dsNew = 0;
  > if (updateDiskspace && (dsNew = newnode.diskspaceConsumed()) != dsOld) {
  > try {
  > updateSpaceConsumed(path, 0, dsNew-dsOld);
  > ...
  > {code}
  > So in the above example we started with diskspace at 384mb (3 * 128mb) and then we subtract 375mb (to reflect only 9mb raw was actually used) twice so for each file the diskspace for the directory is - 366mb (384mb minus 2 * 375mb). Which is why the quota gets negative and yet we can still write more files.
  > So a directory with lots of single block files (if you have multiple blocks on the final partial block ends up subtracting from the diskspace used) ends up having a quota that's way off.
  > I think the fix is to in FSDirectory#replaceNode not have the diskspaceConsumed calculations differ when the old and new INode have the same blocks. I'll work on a patch which also adds a quota test for blocks that are not multiples of the block size and warns in INodeDirectory#computeContentSummary if the computed size does not reflect the cached value.

- HDFS-1258. Blocker bug reported by atm and fixed by atm (name-node)
  Clearing namespace quota on "/" corrupts FS image

  > The HDFS root directory starts out with a default namespace quota of Integer.MAX_VALUE. If you clear this quota (using "hadoop dfsadmin -clrQuota /"), the fsimage gets corrupted immediately. Subsequent 2NN rolls will fail, and the NN will not come back up from a restart.

- HDFS-1189. Major bug reported by xiaokang and fixed by johnvijoe (name-node)
  Quota counts missed between clear quota and set quota

  > HDFS Quota counts will be missed between a clear quota operation and a set quota.
  > When setting quota for a dir, the INodeDirectory will be replaced by INodeDirectoryWithQuota and dir.isQuotaSet() becomes true. When INodeDirectoryWithQuota is newly created, quota counting will be performed. However, when clearing quota, the quota conf is set to -1 and dir.isQuotaSet() becomes false while INodeDirectoryWithQuota will NOT be replaced back to INodeDirectory.
  > FSDirectory.updateCount just update the quota count for inodes that isQuotaSet() is true. So after clear quota for a dir, its quota counts will not be updated and it's reasonable. But when re seting quota for this dir, quota counting will not be performed and some counts will be missed.

- HADOOP-7475. Blocker bug reported by eyang and fixed by eyang
  hadoop-setup-single-node.sh is broken

  > When running hadoop-setup-single-node.sh, the system can not find the templates configuration directory:
  > {noformat}
  > cat: /usr/libexec/../templates/conf/core-site.xml: No such file or directory
  > cat: /usr/libexec/../templates/conf/hdfs-site.xml: No such file or directory
  > cat: /usr/libexec/../templates/conf/mapred-site.xml: No such file or directory
  > cat: /usr/libexec/../templates/conf/hadoop-env.sh: No such file or directory
  > chown: cannot access `hadoop-env.sh': No such file or directory
  > chmod: cannot access `hadoop-env.sh': No such file or directory
  > cp: cannot stat `*.xml': No such file or directory
  > cp: cannot stat `hadoop-env.sh': No such file or directory
  > {noformat}

- HADOOP-7398. Major new feature reported by owen.omalley and fixed by owen.omalley
  create a mechanism to suppress the HADOOP_HOME deprecated warning

  > Create a new mechanism to suppress the warning about HADOOP_HOME deprecation.
  > I'll create a HADOOP_HOME_WARN_SUPPRESS environment variable that suppresses the warning.

- HADOOP-7373. Major bug reported by owen.omalley and fixed by owen.omalley
  Tarball deployment doesn't work with {start,stop}-{dfs,mapred}

  > The hadoop-config.sh overrides the variable "bin", which makes the scripts use libexec for hadoop-daemon(s).

- HADOOP-7364. Major bug reported by tgraves and fixed by tgraves (test)
  TestMiniMRDFSCaching fails if test.build.dir is set to something other than build/test

  > TestMiniMRDFSCaching fails if test.build.dir is set to something other than build/test.

- HADOOP-7356. Blocker bug reported by eyang and fixed by eyang
  RPM packages broke bin/hadoop script for hadoop 0.20.205

  > hadoop-config.sh has been moved to libexec for binary package, but developers prefers to have hadoop-config.sh in bin. Hadoo shell scripts should be modified to support both scenarios.

- HADOOP-7330. Major bug reported by vicaya and fixed by vicaya (metrics)
  The metrics source mbean implementation should return the attribute value instead of the object

  > The MetricsSourceAdapter#getAttribute in 0.20.203 is returning the attribute object instead of the value.

- HADOOP-7324. Blocker bug reported by vicaya and fixed by priyomustafi (metrics)
  Ganglia plugins for metrics v2

  > Although, all metrics in metrics v2 are exposed via the standard JMX mechanisms, most users are using Ganglia to collect metrics.

- HADOOP-7277. Minor improvement reported by naisbitt and fixed by naisbitt (build)
  Add Eclipse launch tasks for the 0.20-security branch

  > This is to add the eclipse launchers from HADOOP-5911 to the 0.20 security branch.
  > Eclipse has a notion of "run configuration", which encapsulates what's needed to run or debug an application. I use this quite a bit to start various Hadoop daemons in debug mode, with breakpoints set, to inspect state and what not.
  > This is simply configuration, so no tests are provided. After running "ant eclipse" and refreshing your project, you should see entries in the Run Configurations and Debug Configurations for launching the various hadoop daemons from within eclipse. There's a template for testing a specific test, and also templates to run all the tests, the job tracker, and a task tracker. It's likely that some parameters need to be further tweaked to have the same behavior as "ant test", but for most tests, this works.
  > This also requires a small change to build.xml for the eclipse classpath.

- HADOOP-7274. Minor bug reported by jeagles and fixed by jeagles (util)
  CLONE - IOUtils.readFully and IOUtils.skipFully have typo in exception creation's message

  > Same fix as for HADOOP-7057 for the Hadoop security branch
  > {noformat}
  > throw new IOException( "Premeture EOF from inputStream");
  > {noformat}

- HADOOP-7248. Minor improvement reported by cos and fixed by tgraves (build)
  Have a way to automatically update Eclipse .classpath file when new libs are added to the classpath through Ivy for 0.20-* based sources

  > Backport HADOOP-6407 into 0.20 based source trees

- HADOOP-7232. Blocker bug reported by owen.omalley and fixed by owen.omalley (documentation)
  Fix javadoc warnings

  > The javadoc is currently generating 31 warnings.

- HADOOP-7144. Major new feature reported by vicaya and fixed by revans2
  Expose JMX with something like JMXProxyServlet

  > Much of the Hadoop metrics and status info is available via JMX, especially since 0.20.100, and 0.22+ (HDFS-1318, HADOOP-6728 etc.) For operations staff not familiar JMX setup, especially JMX with SSL and firewall tunnelling, the usage can be daunting. Using a JMXProxyServlet (a la Tomcat) to translate JMX attributes into JSON output would make a lot of non-Java admins happy.
  > We could probably use Tomcat's JMXProxyServlet code directly, if it's already output some standard format (JSON or XML etc.) The code is simple enough to port over and can probably integrate with the common HttpServer as one of the default servelet (maybe /jmx) for the pluggable security.

- HADOOP-6255. Major new feature reported by owen.omalley and fixed by eyang
  Create an rpm integration project

  > Added RPM/DEB packages to build system.

## Changes Since Hadoop 0.20.2

- HADOOP-7190. Add metrics v1 back for backwards compatibility. (omalley)
- MAPREDUCE-2360. Remove stripping of scheme, authority from submit dir in support of viewfs. (cdouglas)
- MAPREDUCE-2359 Use correct file system to access distributed cache objects. (Krishna Ramachandran)
- MAPREDUCE-2361. "Fix Distributed Cache is not adding files to class paths correctly" - Drop the host/scheme/fragment from URI (cdouglas)
- MAPREDUCE-2362. Fix unit-test failures: TestBadRecords (NPE due to rearranged MapTask code) and TestTaskTrackerMemoryManager (need hostname in output-string pattern). (Greg Roelofs, Krishna Ramachandran)
- HDFS-1729. Add statistics logging for better visibility into startup time costs. (Matt Foley)
- MAPREDUCE-2363. When a queue is built without any access rights we explain the problem. (Richard King)
- MAPREDUCE-1563. TaskDiagnosticInfo may be missed sometime. (Krishna Ramachandran)
- MAPREDUCE-2364. Don't hold the rjob lock while localizing resources. (ddas via omalley)
- HDFS-1598. Directory listing on hftp:// does not show .*.crc files. (szetszwo)
- MAPREDUCE-2365. New counters for FileInputFormat (BYTES_READ) and FileOutputFormat (BYTES_WRITTEN). New counter MAP_OUTPUT_MATERIALIZED_BYTES for compressed MapOutputSize. (Siddharth Seth)
- HADOOP-7040. Change DiskErrorException to IOException (boryas)
- HADOOP-7104. Remove unnecessary DNS reverse lookups from RPC layer (kzhang)
- MAPREDUCE-2366. Fix a problem where the task browser UI can't retrieve the stdxxx printouts of streaming jobs that abend in the unix code, in the common case where the containing job doesn't reuse JVM's. (Richard King)
- HADOOP-6977. Herriot daemon clients should vend statistics (cos)
- HADOOP-6971. Clover build doesn't generate per-test coverage (cos)
- HADOOP-6879. Provide SSH based (Jsch) remote execution API for system tests. (cos)
- MAPREDUCE-2355. Add a configuration knob mapreduce.tasktracker.outofband.heartbeat.damper that limits out of band heartbeats (acmurthy)
- MAPREDUCE-2356. Fix a race-condition that corrupted a task's state on the JobTracker. (Luke Lu)
- MAPREDUCE-2357. Always propagate IOExceptions that are thrown by non-FileInputFormat. (Luke Lu)
- HADOOP-7163. RPC handles SocketTimeOutException during SASL negotiation. (ddas)
- MAPREDUCE-2358. MapReduce assumes the default FileSystem is HDFS. (Krishna Ramachandran)
- MAPREDUCE-1904. Reducing locking contention in TaskTracker's MapOutputServlet LocalDirAllocator. (Rajesh Balamohan via acmurthy)
- HDFS-1626. Make BLOCK_INVALIDATE_LIMIT configurable. (szetszwo)
- HDFS-1584. Adds a check for whether relogin is needed to getDelegationToken in HftpFileSystem. (Kan Zhang via ddas)
- HADOOP-7115. Reduces the number of calls to getpwuid_r and getpwgid_r, by implementing a cache in NativeIO. (ddas)
- HADOOP-6882. An XSS security exploit in jetty-6.1.14. jetty upgraded to 6.1.26. (ddas)
- MAPREDUCE-2278. Fixes a memory leak in the TaskTracker. (cdouglas)
- HDFS-1353 redux. Modulate original 1353 to not bump RPC version. (jhoman)
- MAPREDUCE-2082 Race condition in writing the jobtoken password file when launching pipes jobs (jitendra and ddas) HADOOP-6978. Fixes task log servlet vulnerabilities via symlinks. (Todd Lipcon and Devaraj Das)
- MAPREDUCE-2178. Write task initialization to avoid race conditions leading to privilege escalation and resource leakage by performing more actiions as the user. (Owen O'Malley, Devaraj Das, Chris Douglas via cdouglas)
- HDFS-1364. HFTP client should support relogin from keytab
- HADOOP-6907. Make RPC client to use per-proxy configuration. (Kan Zhang via ddas)
- MAPREDUCE-2055. Fix JobTracker to decouple job retirement from copy of job-history file to HDFS and enhance RetiredJobInfo to carry aggregated job-counters to prevent a disk roundtrip on job-completion to fetch counters for the JobClient. (Krishna Ramachandran via acmurthy) HDFS-1353. Remove most of getBlockLocation optimization (jghoman)
- MAPREDUCE-2023. TestDFSIO read test may not read specified bytes. (htang)
- HDFS-1340. A null delegation token is appended to the url if security is disabled when browsing filesystem.(boryas)
- HDFS-1352. Fix jsvc.location. (jghoman)
- HADOOP-6860. 'compile-fault-inject' should never be called directly. (cos)
- MAPREDUCE-2005. TestDelegationTokenRenewal fails (boryas)
- MAPREDUCE-2000. Rumen is not able to extract counters for Job history logs from Hadoop 0.20. (htang)
- MAPREDUCE-1961. ConcurrentModificationException when shutting down Gridmix. (htang)
- HADOOP-6899. RawLocalFileSystem set working directory does not work for relative names. (suresh)
- HDFS-495. New clients should be able to take over files lease if the old client died. (shv)
- HADOOP-6728. Re-design and overhaul of the Metrics framework. (Luke Lu via acmurthy)
- MAPREDUCE-1966. Change blacklisting of tasktrackers on task failures to be a simple graylist to fingerpoint bad tasktrackers. (Greg Roelofs via acmurthy)
- HADOOP-6864. Add ability to get netgroups (as returned by getent netgroup command) using native code (JNI) instead of forking. (Erik Steffl)
- HDFS-1318. HDFS Namenode and Datanode WebUI information needs to be accessible programmatically for scripts. (Tanping Wang via suresh)
- HDFS-1315. Add fsck event to audit log and remove other audit log events corresponding to FSCK listStatus and open calls. (suresh)
- MAPREDUCE-1941. Provides access to JobHistory file (raw) with job user/acl permission. (Srikanth Sundarrajan via ddas)
- MAPREDUCE-291. Optionally a separate daemon should serve JobHistory. (Srikanth Sundarrajan via ddas)
- MAPREDUCE-1936. Make Gridmix3 more customizable (sync changes from trunk). (htang)
- HADOOP-5981. Fix variable substitution during parsing of child environment variables. (Krishna Ramachandran via acmurthy)
- MAPREDUCE-339. Greedily schedule failed tasks to cause early job failure. (cdouglas)
- MAPREDUCE-1872. Hardened CapacityScheduler to have comprehensive, coherent limits on tasks/jobs for jobs/users/queues. Also, added the ability to refresh queue definitions without the need to restart the JobTracker. (acmurthy)
- HDFS-1161. Make DN minimum valid volumes configurable. (shv)
- HDFS-457. Reintroduce volume failure tolerance for DataNodes. (shv)
- HDFS-1307 Add start time, end time and total time taken for FSCK to FSCK report. (suresh)
- MAPREDUCE-1207. Sanitize user environment of map/reduce tasks and allow admins to set environment and java options. (Krishna Ramachandran via acmurthy)
- HDFS-1298 - Add support in HDFS for new statistics added in FileSystem to track the file system operations (suresh)
- HDFS-1301. TestHDFSProxy need to use server side conf for ProxyUser stuff.(boryas)
- HADOOP-6859 - Introduce additional statistics to FileSystem to track file system operations (suresh)
- HADOOP-6818. Provides a JNI implementation of Unix Group resolution. The config hadoop.security.group.mapping should be set to org.apache.hadoop.security.JniBasedUnixGroupsMapping to enable this implementation. (ddas)
- MAPREDUCE-1938. Introduces a configuration for putting user classes before the system classes during job submission and in task launches. Two things need to be done in order to use this feature - (1) mapreduce.user.classpath.first : this should be set to true in the jobconf, and, (2) HADOOP_USER_CLASSPATH_FIRST : this is relevant for job submissions done using bin/hadoop shell script. HADOOP_USER_CLASSPATH_FIRST should be defined in the environment with some non-empty value (like "true"), and then bin/hadoop should be executed. (ddas)
- HADOOP-6669. Respect compression configuration when creating DefaultCodec compressors. (Koji Noguchi via cdouglas)
- HADOOP-6855. Add support for netgroups, as returned by command getent netgroup. (Erik Steffl)
- HDFS-599. Allow NameNode to have a seprate port for service requests from client requests. (Dmytro Molkov via hairong)
- HDFS-132. Fix namenode to not report files deleted metrics for deletions done while replaying edits during startup. (shv)
- MAPREDUCE-1521. Protection against incorrectly configured reduces (mahadev)
- MAPREDUCE-1936. Make Gridmix3 more customizable. (htang)
- MAPREDUCE-517. Enhance the CapacityScheduler to assign multiple tasks per-heartbeat. (acmurthy)
- MAPREDUCE-323. Re-factor layout of JobHistory files on HDFS to improve operability. (Dick King via acmurthy)
- MAPREDUCE-1921. Ensure exceptions during reading of input data in map tasks are augmented by information about actual input file which caused the exception. (Krishna Ramachandran via acmurthy)
- MAPREDUCE-1118. Enhance the JobTracker web-ui to ensure tabular columns are sortable, also added a /scheduler servlet to CapacityScheduler for enhanced UI for queue information. (Krishna Ramachandran via acmurthy)
- HADOOP-5913. Add support for starting/stopping queues. (cdouglas)
- HADOOP-6835. Add decode support for concatenated gzip files. (Greg Roelofs)
- HDFS-1158. Revert HDFS-457. (shv)
- MAPREDUCE-1699. Ensure JobHistory isn't disabled for any reason. (Krishna Ramachandran via acmurthy)
- MAPREDUCE-1682. Fix speculative execution to ensure tasks are not scheduled after job failure. (acmurthy)
- MAPREDUCE-1914. Ensure unique sub-directories for artifacts in the DistributedCache are cleaned up. (Dick King via acmurthy)
- HADOOP-6713. Multiple RPC Reader Threads (Bharathm)
- HDFS-1250. Namenode should reject block reports and block received requests from dead datanodes (suresh)
- MAPREDUCE-1863. [Rumen] Null failedMapAttemptCDFs in job traces generated by Rumen. (htang)
- MAPREDUCE-1309. Rumen refactory. (htang)
- HDFS-1114. Implement LightWeightGSet for BlocksMap in order to reduce NameNode memory footprint. (szetszwo)
- MAPREDUCE-572. Fixes DistributedCache.checkURIs to throw error if link is missing for uri in cache archives. (amareshwari)
- MAPREDUCE-787. Fix JobSubmitter to honor user given symlink in the path. (amareshwari)
- HADOOP-6815. refreshSuperUserGroupsConfiguration should use server side configuration for the refresh( boryas)
- MAPREDUCE-1868. Add a read and connection timeout to JobClient while pulling tasklogs. (Krishna Ramachandran via acmurthy)
- HDFS-1119. Introduce a GSet interface to BlocksMap. (szetszwo)
- MAPREDUCE-1778. Ensure failure to setup CompletedJobStatusStore is not silently ignored by the JobTracker. (Krishna Ramachandran via acmurthy)
- MAPREDUCE-1538. Add a limit on the number of artifacts in the DistributedCache to ensure we cleanup aggressively. (Dick King via acmurthy)
- MAPREDUCE-1850. Add information about the host from which a job is submitted. (Krishna Ramachandran via acmurthy)
- HDFS-1110. Reuses objects for commonly used file names in namenode to reduce the heap usage. (suresh)
- HADOOP-6810. Extract a subset of tests for smoke (DOA) validation. (cos)
- HADOOP-6642. Remove debug stmt left from original patch. (cdouglas)
- HADOOP-6808. Add comments on how to setup File/Ganglia Context for kerberos metrics (Erik Steffl)
- HDFS-1061. INodeFile memory optimization. (bharathm)
- HDFS-1109. HFTP supports filenames that contains the character "+". (Dmytro Molkov via dhruba, backported by szetszwo)
- HDFS-1085. Check file length and bytes read when reading a file through hftp in order to detect failure. (szetszwo)
- HDFS-1311. Running tests with 'testcase' cause triple execution of the same test case (cos)
- HDFS-1150.FIX. Verify datanodes' identities to clients in secure clusters. Update to patch to improve handling of jsvc source in build.xml (jghoman)
- HADOOP-6752. Remote cluster control functionality needs JavaDocs improvement. (Balaji Rajagopalan via cos)
- MAPREDUCE-1288. Fixes TrackerDistributedCacheManager to take into account the owner of the localized file in the mapping from cache URIs to CacheStatus objects. (ddas)
- MAPREDUCE-1682. Fix speculative execution to ensure tasks are not scheduled after job failure. (acmurthy)
- MAPREDUCE-1914. Ensure unique sub-directories for artifacts in the DistributedCache are cleaned up. (Dick King via acmurthy)
- MAPREDUCE-1538. Add a limit on the number of artifacts in the DistributedCache to ensure we cleanup aggressively. (Dick King via acmurthy)
- MAPREDUCE-1900. Fixes a FS leak that i missed in the earlier patch. (ddas)
- MAPREDUCE-1900. Makes JobTracker/TaskTracker close filesystems, created on behalf of users, when they are no longer needed. (ddas)
- HADOOP-6832. Add a static user plugin for web auth for external users. (omalley)
- HDFS-1007. Fixes a bug in SecurityUtil.buildDTServiceName to do with handling of null hostname. (omalley)
- HDFS-1007. makes long running servers using hftp work. Also has some refactoring in the MR code to do with handling of delegation tokens. (omalley & ddas)
- HDFS-1178. The NameNode servlets should not use RPC to connect to the NameNode. (omalley)
- MAPREDUCE-1807. Re-factor TestQueueManager. (Richard King via acmurthy)
- HDFS-1150. Fixes the earlier patch to do logging in the right directory and also adds facility for monitoring processes (via -Dprocname in the command line). (Jakob Homan via ddas)
- HADOOP-6781. security audit log shouldn't have exception in it. (boryas)
- HADOOP-6776. Fixes the javadoc in UGI.createProxyUser. (ddas)
- HDFS-1150. building jsvc from source tar. source tar is also checked in. (jitendra)
- HDFS-1150. Bugfix in the hadoop shell script. (ddas)
- HDFS-1153. The navigation to /dfsnodelist.jsp with invalid input parameters produces NPE and HTTP 500 error (rphulari) MAPREDUCE-1664. Bugfix to enable queue administrators of a queue to view job details of jobs submitted to that queue even though they are not part of acl-view-job.
- HDFS-1150. Bugfix to add more knobs to secure datanode starter.
- HDFS-1157. Modifications introduced by HDFS-1150 are breaking aspect's bindings (cos)
- HDFS-1130. Adds a configuration dfs.cluster.administrators for controlling access to the default servlets in hdfs. (ddas)
- HADOOP-6706.FIX. Relogin behavior for RPC clients could be improved (boryas)
- HDFS-1150. Verify datanodes' identities to clients in secure clusters. (jghoman)
- MAPREDUCE-1442. Fixed regex in job-history related to parsing Counter values. (Luke Lu via acmurthy)
- HADOOP-6760. WebServer shouldn't increase port number in case of negative port setting caused by Jetty's race. (cos)
- HDFS-1146. Javadoc for getDelegationTokenSecretManager in FSNamesystem. (jitendra)
- HADOOP-6706. Fix on top of the earlier patch. Closes the connection on a SASL connection failure, and retries again with a new connection. (ddas)
- MAPREDUCE-1716. Fix on top of earlier patch for logs truncation a.k.a MAPREDUCE-1100. Addresses log truncation issues when binary data is written to log files and adds a header to a truncated log file to inform users of the done trucation.
- HDFS-1383. Improve the error messages when using hftp://.
- MAPREDUCE-1744. Fixed DistributedCache apis to take a user-supplied FileSystem to allow for better proxy behaviour for Oozie. (Richard King)
- MAPREDUCE-1733. Authentication between pipes processes and java counterparts. (jitendra)
- MAPREDUCE-1664. Bugfix on top of the previous patch. (ddas)
- HDFS-1136. FileChecksumServlets.RedirectServlet doesn't carry forward the delegation token (boryas)
- HADOOP-6756. Change value of FS_DEFAULT_NAME_KEY from fs.defaultFS to fs.default.name which is a correct name for 0.20 (steffl)
- HADOOP-6756. Document (javadoc comments) and cleanup configuration keys in CommonConfigurationKeys.java (steffl)
- MAPREDUCE-1759. Exception message for unauthorized user doing killJob, killTask, setJobPriority needs to be improved. (gravi via vinodkv)
- HADOOP-6715. AccessControlList.toString() returns empty string when we set acl to "*". (gravi via vinodkv)
- HADOOP-6757. NullPointerException for hadoop clients launched from streaming tasks. (amarrk via vinodkv)
- HADOOP-6631. FileUtil.fullyDelete() should continue to delete other files despite failure at any level. (vinodkv)
- MAPREDUCE-1317. NPE in setHostName in Rumen. (rksingh)
- MAPREDUCE-1754. Replace mapred.persmissions.supergroup with an acl : mapreduce.cluster.administrators and HADOOP-6748.: Remove hadoop.cluster.administrators. Contributed by Amareshwari Sriramadasu.
- HADOOP-6701. Incorrect exit codes for "dfs -chown", "dfs -chgrp" (rphulari)
- HADOOP-6640. FileSystem.get() does RPC retires within a static synchronized block. (hairong)
- HDFS-1006. Removes unnecessary logins from the previous patch. (ddas)
- HADOOP-6745. adding some java doc to Server.RpcMetrics, UGI (boryas)
- MAPREDUCE-1707. TaskRunner can get NPE in getting ugi from TaskTracker. (vinodkv)
- HDFS-1104. Fsck triggers full GC on NameNode. (hairong)
- HADOOP-6332. Large-scale Automated Test Framework (sharad, Sreekanth Ramakrishnan, at all via cos)
- HADOOP-6526. Additional fix for test context on top of existing one. (cos)
- HADOOP-6710. Symbolic umask for file creation is not conformant with posix. (suresh)
- HADOOP-6693. Added metrics to track kerberos login success and failure. (suresh)
- MAPREDUCE-1711. Gridmix should provide an option to submit jobs to the same queues as specified in the trace. (rksing via htang)
- MAPREDUCE-1687. Stress submission policy does not always stress the cluster. (htang)
- MAPREDUCE-1641. Bug-fix to ensure command line options such as -files/-archives are checked for duplicate artifacts in the DistributedCache. (Amareshwari Sreeramadasu via acmurthy)
- MAPREDUCE-1641. Fix DistributedCache to ensure same files cannot be put in both the archives and files sections. (Richard King via acmurthy)
- HADOOP-6670. Fixes a testcase issue introduced by the earlier commit of the HADOOP-6670 patch. (ddas)
- MAPREDUCE-1718. Fixes a problem to do with correctly constructing service name for the delegation token lookup in HftpFileSystem (borya via ddas)
- HADOOP-6674. Fixes the earlier patch to handle pings correctly (ddas).
- MAPREDUCE-1664. Job Acls affect when Queue Acls are set. (Ravi Gummadi via vinodkv)
- HADOOP-6718. Fixes a problem to do with clients not closing RPC connections on a SASL failure. (ddas)
- MAPREDUCE-1397. NullPointerException observed during task failures. (Amareshwari Sriramadasu via vinodkv)
- HADOOP-6670. Use the UserGroupInformation's Subject as the criteria for equals and hashCode. (omalley)
- HADOOP-6716. System won't start in non-secure mode when kerb5.conf (edu.mit.kerberos on Mac) is not present. (boryas)
- MAPREDUCE-1607. Task controller may not set permissions for a task cleanup attempt's log directory. (Amareshwari Sreeramadasu via vinodkv)
- MAPREDUCE-1533. JobTracker performance enhancements. (Amar Kamat via vinodkv)
- MAPREDUCE-1701. AccessControlException while renewing a delegation token in not correctly handled in the JobTracker. (boryas)
- HDFS-481. Incremental patch to fix broken unit test in contrib/hdfsproxy
- HADOOP-6706. Fixes a bug in the earlier version of the same patch (ddas)
- HDFS-1096. allow dfsadmin/mradmin refresh of superuser proxy group mappings(boryas).
- HDFS-1012. Support for cluster specific path entries in ldap for hdfsproxy (Srikanth Sundarrajan via Nicholas)
- HDFS-1011. Improve Logging in HDFSProxy to include cluster name associated with the request (Srikanth Sundarrajan via Nicholas)
- HDFS-1010. Retrieve group information from UnixUserGroupInformation instead of LdapEntry (Srikanth Sundarrajan via Nicholas)
- HDFS-481. Bug fix - hdfsproxy: Stack overflow + Race conditions (Srikanth Sundarrajan via Nicholas)
- MAPREDUCE-1657. After task logs directory is deleted, tasklog servlet displays wrong error message about job ACLs. (Ravi Gummadi via vinodkv)
- MAPREDUCE-1692. Remove TestStreamedMerge from the streaming tests. (Amareshwari Sriramadasu and Sreekanth Ramakrishnan via vinodkv)
- HDFS-1081. Performance regression in DistributedFileSystem::getFileBlockLocations in secure systems (jhoman) MAPREDUCE-1656. JobStory should provide queue info. (htang)
- MAPREDUCE-1317. Reducing memory consumption of rumen objects. (htang)
- MAPREDUCE-1317. Reverting the patch since it caused build failures. (htang)
- MAPREDUCE-1683. Fixed jobtracker web-ui to correctly display heap-usage. (acmurthy) HADOOP-6706. Fixes exception handling for saslConnect. The ideal solution is to the Refreshable interface but as Owen noted in HADOOP-6656, it doesn't seem to work as expected. (ddas)
- MAPREDUCE-1617. TestBadRecords failed once in our test runs. (Amar Kamat via vinodkv).
- MAPREDUCE-587. Stream test TestStreamingExitStatus fails with Out of Memory. (Amar Kamat via vinodkv).
- HDFS-1096. Reverting the patch since it caused build failures. (ddas)
- MAPREDUCE-1317. Reducing memory consumption of rumen objects. (htang)
- MAPREDUCE-1680. Add a metric to track number of heartbeats processed by the JobTracker. (Richard King via acmurthy)
- MAPREDUCE-1683. Removes JNI calls to get jvm current/max heap usage in ClusterStatus by default. (acmurthy)
- HADOOP-6687. user object in the subject in UGI should be reused in case of a relogin. (jitendra)
- HADOOP-5647. TestJobHistory fails if /tmp/_logs is not writable to. Testcase should not depend on /tmp. (Ravi Gummadi via vinodkv)
- MAPREDUCE-181. Bug fix for Secure job submission. (Ravi Gummadi via vinodkv)
- MAPREDUCE-1635. ResourceEstimator does not work after MAPREDUCE-842. (Amareshwari Sriramadasu via vinodkv)
- MAPREDUCE-1526. Cache the job related information while submitting the job. (rksingh)
- HADOOP-6674. Turn off SASL checksums for RPCs. (jitendra via omalley)
- HADOOP-5958. Replace fork of DF with library call. (cdouglas via omalley)
- HDFS-999. Secondary namenode should login using kerberos if security is configured. Bugfix to original patch. (jhoman)
- MAPREDUCE-1594. Support for SleepJobs in Gridmix (rksingh)
- HDFS-1007. Fix. ServiceName for delegation token for Hftp has hftp port and not RPC port. MAPREDUCE-1376. Support for varied user submissions in Gridmix (rksingh)
- HDFS-1080. SecondaryNameNode image transfer should use the defined http address rather than local ip address (jhoman) HADOOP-6661. User document for UserGroupInformation.doAs for secure impersonation. (jitendra)
- MAPREDUCE-1624. Documents the job credentials and associated details to do with delegation tokens (ddas) HDFS-1036. Documentation for fetchdt for forrest (boryas) HDFS-1039. New patch on top of previous patch. Gets namenode address from conf. (jitendra)
- HADOOP-6656. Renew Kerberos TGT when 80% of the renew lifetime has been used up. (omalley)
- HADOOP-6653. Protect against NPE in setupSaslConnection when real user is null. (omalley)
- HADOOP-6649. An error in the previous committed patch. (jitendra)
- HADOOP-6652. ShellBasedUnixGroupsMapping shouldn't have a cache. (ddas)
- HADOOP-6649. login object in UGI should be inside the subject (jitendra)
- HADOOP-6637. Benchmark overhead of RPC session establishment (shv via jitendra)
- HADOOP-6648. Credentials must ignore null tokens that can be generated when using HFTP to talk to insecure clusters. (omalley)
- HADOOP-6632. Fix on JobTracker to reuse filesystem handles if possible. (ddas)
- HADOOP-6647. balancer fails with "is not authorized for protocol interface NamenodeProtocol" in secure environment (boryas)
- MAPREDUCE-1612. job conf file is not accessible from job history web page. (Ravi Gummadi via vinodkv)
- MAPREDUCE-1611. Refresh nodes and refresh queues doesnt work with service authorization enabled. (Amar Kamat via vinodkv)
- HADOOP-6644. util.Shell getGROUPS_FOR_USER_COMMAND method name - should use common naming convention (boryas)
- MAPREDUCE-1609. Fixes a problem with localization of job log directories when tasktracker is re-initialized that can result in failed tasks. (Amareshwari Sriramadasu via yhemanth)
- MAPREDUCE-1610. Update forrest documentation for directory structure of localized files. (Ravi Gummadi via yhemanth)
- MAPREDUCE-1532. Fixes a javadoc and an exception message in JobInProgress when the authenticated user is different from the user in conf. (ddas)
- MAPREDUCE-1417. Update forrest documentation for private and public distributed cache files. (Ravi Gummadi via yhemanth)
- HADOOP-6634. AccessControlList uses full-principal names to verify acls causing queue-acls to fail (vinodkv) HADOOP-6642. Fix javac, javadoc, findbugs warnings. (chrisdo via acmurthy)
- HDFS-1044. Cannot submit mapreduce job from secure client to unsecure sever. (boryas) HADOOP-6638. try to relogin in a case of failed RPC connection (expired tgt) only in case the subject is loginUser or proxyUgi.realUser. (boryas)
- HADOOP-6632. Support for using different Kerberos keys for different instances of Hadoop services. (jitendra)
- HADOOP-6526. Need mapping from long principal names to local OS user names. (jitendra)
- MAPREDUCE-1604. Update Forrest documentation for job authorization ACLs. (Amareshwari Sriramadasu via yhemanth)
- HDFS-1045. In secure clusters, re-login is necessary for https clients before opening connections (jhoman)
- HADOOP-6603. Addition to original patch to be explicit about new method not being for general use. (jhoman)
- MAPREDUCE-1543. Add audit log messages for job and queue access control checks. (Amar Kamat via yhemanth)
- MAPREDUCE-1606. Fixed occassinal timeout in TestJobACL. (Ravi Gummadi via acmurthy)
- HADOOP-6633. normalize property names for JT/NN kerberos principal names in configuration. (boryas)
- HADOOP-6613. Changes the RPC server so that version is checked first on an incoming connection. (Kan Zhang via ddas)
- HADOOP-5592. Fix typo in Streaming doc in reference to GzipCodec. (Corinne Chandel via tomwhite)
- MAPREDUCE-813. Updates Streaming and M/R tutorial documents. (Corinne Chandel via ddas)
- MAPREDUCE-927. Cleanup of task-logs should happen in TaskTracker instead of the Child. (Amareshwari Sriramadasu via vinodkv)
- HDFS-1039. Service should be set in the token in JspHelper.getUGI. (jitendra)
- MAPREDUCE-1599. MRBench reuses jobConf and credentials there in. (jitendra)
- MAPREDUCE-1522. FileInputFormat may use the default FileSystem for the input path. (Tsz Wo (Nicholas), SZE via cdouglas)
- HDFS-1036. In DelegationTokenFetch pass Configuration object so getDefaultUri will work correctly.
- HDFS-1038. In nn_browsedfscontent.jsp fetch delegation token only if security is enabled. (jitendra)
- HDFS-1036. in DelegationTokenFetch dfs.getURI returns no port (boryas)
- HADOOP-6598. Verbose logging from the Group class (one more case) (boryas)
- HADOOP-6627. Bad Connection to FS" message in FSShell should print message from the exception (boryas)
- HDFS-1033. In secure clusters, NN and SNN should verify that the remote principal during image and edits transfer (jhoman)
- HDFS-1005. Fixes a bug to do with calling the cross-realm API in Fsck client. (ddas)
- MAPREDUCE-1422. Fix cleanup of localized job directory to work if files with non-deletable permissions are created within it. (Amar Kamat via yhemanth)
- HDFS-1007. Fixes bugs to do with 20S cluster talking to 20 over hftp (borya)
- MAPREDUCE-1566. Fixes bugs in the earlier patch. (ddas)
- HDFS-992. A bug in backport for HDFS-992. (jitendra)
- HADOOP-6598. Remove verbose logging from the Groups class. (borya) HADOOP-6620. NPE if renewer is passed as null in getDelegationToken. (jitendra)
- HDFS-1023. Second Update to original patch to fix username (jhoman)
- MAPREDUCE-1435. Add test cases to already committed patch for this jira, synchronizing changes with trunk. (yhemanth)
- HADOOP-6612. Protocols RefreshUserToGroupMappingsProtocol and RefreshAuthorizationPolicyProtocol authorization settings thru KerberosInfo (boryas)
- MAPREDUCE-1566. Bugfix for tests on top of the earlier patch. (ddas)
- MAPREDUCE-1566. Mechanism to import tokens and secrets from a file in to the submitted job. (omalley)
- HADOOP-6603. Provide workaround for issue with Kerberos not resolving corss-realm principal. (kan via jhoman)
- HDFS-1023. Update to original patch to fix username (jhoman)
- HDFS-814. Add an api to get the visible length of a DFSDataInputStream. (hairong)
- HDFS-1023. Allow http server to start as regular user if https principal is not defined. (jhoman)
- HDFS-1022. Merge all three test specs files (common, hdfs, mapred) into one. (steffl)
- HDFS-101. DFS write pipeline: DFSClient sometimes does not detect second datanode failure. (hairong)
- HDFS-1015. Intermittent failure in TestSecurityTokenEditLog. (jitendra)
- MAPREDUCE-1550. A bugfix on top of what was committed earlier (ddas).
- MAPREDUCE-1155. DISABLING THE TestStreamingExitStatus temporarily. (ddas)
- HDFS-1020. Changes the check for renewer from short name to long name in the cancel/renew delegation token methods. (jitendra via ddas)
- HDFS-1019. Fixes values of delegation token parameters in hdfs-default.xml. (jitendra via ddas)
- MAPREDUCE-1430. Fixes a backport issue with the earlier patch. (ddas)
- MAPREDUCE-1559. Fixes a problem in DelegationTokenRenewal class to do with using the right credentials when talking to the NameNode.(ddas)
- MAPREDUCE-1550. Fixes a problem to do with creating a filesystem using the user's UGI in the JobHistory browsing. (ddas)
- HADOOP-6609. Fix UTF8 to use a thread local DataOutputBuffer instead of a static that was causing a deadlock in RPC. (omalley)
- HADOOP-6584. Fix javadoc warnings introduced by original HADOOP-6584 patch (jhoman) HDFS-1017. browsedfs jsp should call JspHelper.getUGI rather than using createRemoteUser(). (jhoman)
- MAPREDUCE-899. Modified LinuxTaskController to check that task-controller has right permissions and ownership before performing any actions. (Amareshwari Sriramadasu via yhemanth)
- HDFS-204. Revive number of files listed metrics. (hairong)
- HADOOP-6569. FsShell#cat should avoid calling uneccessary getFileStatus before opening a file to read. (hairong)
- HDFS-1014. Error in reading delegation tokens from edit logs. (jitendra)
- HDFS-458. Add under-10-min tests from 0.22 to 0.20.1xx, only the tests that already exist in 0.20.1xx (steffl)
- MAPREDUCE-1155. Just pulls out the TestStreamingExitStatus part of the patch from jira (that went to 0.22). (ddas) HADOOP-6600. Fix for branch backport only. Comparing of user should use equals. (boryas).
- HDFS-1006. Fixes NameNode and SecondaryNameNode to use kerberizedSSL for the http communication. (Jakob Homan via ddas)
- HDFS-1007. Fixes a bug on top of the earlier patch. (ddas)
- HDFS-1005. Fsck security. Makes it work over kerberized SSL (boryas and jhoman)
- HDFS-1007. Makes HFTP and Distcp use kerberized SSL. (ddas)
- MAPREDUCE-1455. Fixes a testcase in the earlier patch. (Ravi Gummadi via ddas)
- HDFS-992. Refactors block access token implementation to conform to the generic Token interface. (Kan Zhang via ddas)
- HADOOP-6584. Adds KrbSSL connector for jetty. (Jakob Homan via ddas)
- HADOOP-6589. Add a framework for better error messages when rpc connections fail to authenticate. (Kan Zhang via omalley)
- HADOOP-6600,HDFS-1003,MAPREDUCE-1539. mechanism for authorization check for inter-server protocols(boryas)
- HADOOP-6580,HDFS-993,MAPREDUCE-1516. UGI should contain authentication method.
- Namenode and JT should issue a delegation token only for kerberos authenticated clients. (jitendra)
- HDFS-984,HADOOP-6573,MAPREDUCE-1537. Delegation Tokens should be persisted in Namenode, and corresponding changes in common and mr. (jitendra)
- HDFS-994. Provide methods for obtaining delegation token from Namenode for hftp and other uses. Incorporates HADOOP-6594: Update hdfs script to provide fetchdt tool. (jitendra)
- HADOOP-6586. Log authentication and authorization failures and successes (boryas)
- HDFS-991. Allow use of delegation tokens to authenticate to the HDFS servlets. (omalley)
- HADOOP-1849. Add undocumented configuration parameter for per handler call queue size in IPC Server. (shv) HADOOP-6599. Split existing RpcMetrics with summary in RpcMetrics and details information in RpcDetailedMetrics. (suresh)
- HDFS-985. HDFS should issue multiple RPCs for listing a large directory. (hairong)
- HDFS-1000. Updates libhdfs to use the new UGI. (ddas)
- MAPREDUCE-1532. Ensures all filesystem operations at the client is done as the job submitter. Also, changes the renewal to maintain list of tokens to renew. (ddas)
- HADOOP-6596. Add a version field to the seialization of the AbstractDelegationTokenIdentifier. (omalley)
- HADOOP-5561. Add javadoc.maxmemory to build.xml to allow larger memory. (jkhoman via omalley)
- HADOOP-6579. Add a mechanism for encoding and decoding Tokens in to url-safe strings. (omalley)
- MAPREDUCE-1354. Make incremental changes in jobtracker for improving scalability (acmurthy)
- HDFS-999.Secondary namenode should login using kerberos if security is configured(boryas)
- MAPREDUCE-1466. Added a private configuration variable mapreduce.input.num.files, to store number of input files being processed by M/R job. (Arun Murthy via yhemanth)
- MAPREDUCE-1403. Save file-sizes of each of the artifacts in DistributedCache in the JobConf (Arun Murthy via yhemanth)
- HADOOP-6543. Fixes a compilation problem in the original commit. (ddas)
- MAPREDUCE-1520. Moves a call to setWorkingDirectory in Child to within a doAs block. (Amareshwari Sriramadasu via ddas)
- HADOOP-6543. Allows secure clients to talk to unsecure clusters. (Kan Zhang via ddas)
- MAPREDUCE-1505. Delays construction of the job client until it is really required. (Arun C Murthy via ddas)
- HADOOP-6549. TestDoAsEffectiveUser should use ip address of the host for superuser ip check. (jitendra)
- HDFS-464. Fix memory leaks in libhdfs. (Christian Kunz via suresh)
- HDFS-946. NameNode should not return full path name when lisitng a diretory or getting the status of a file. (hairong)
- MAPREDUCE-1398. Fix TaskLauncher to stop waiting for slots on a TIP that is killed / failed. (Amareshwari Sriramadasu via yhemanth)
- MAPREDUCE-1476. Fix the M/R framework to not call commit for special tasks like job setup/cleanup and task cleanup. (Amareshwari Sriramadasu via yhemanth)
- HADOOP-6467. Performance improvement for liststatus on directories in hadoop archives. (mahadev)
- HADOOP-6558. archive does not work with distcp -update. (nicholas via mahadev)
- HADOOP-6583. Captures authentication and authorization metrics. (ddas)
- MAPREDUCE-1316. Fixes a memory leak of TaskInProgress instances in the jobtracker. (Amar Kamat via yhemanth)
- MAPREDUCE-670. Creates ant target for 10 mins patch test build. (Jothi Padmanabhan via gkesavan)
- MAPREDUCE-1430. JobTracker should be able to renew delegation tokens for the jobs(boryas)
- HADOOP-6551, HDFS-986, MAPREDUCE-1503. Change API for tokens to throw exceptions instead of returning booleans. (omalley)
- HADOOP-6545. Changes the Key for the FileSystem to be UGI. (ddas)
- HADOOP-6572. Makes sure that SASL encryption and push to responder queue for the RPC response happens atomically. (Kan Zhang via ddas)
- HDFS-965. Split the HDFS TestDelegationToken into two tests, of which one proxy users and the other normal users. (jitendra via omalley)
- HADOOP-6560. HarFileSystem throws NPE for har://hdfs-/foo (nicholas via mahadev)
- MAPREDUCE-686. Move TestSpeculativeExecution.Fake* into a separate class so that it can be used by other tests. (Jothi Padmanabhan via sharad)
- MAPREDUCE-181. Fixes an issue in the use of the right config. (ddas)
- MAPREDUCE-1026. Fixes a bug in the backport. (ddas)
- HADOOP-6559. Makes the RPC client automatically re-login when the SASL connection setup fails. This is applicable to only keytab based logins. (ddas)
- HADOOP-2141. Backport changes made in the original JIRA to aid fast unit tests in Map/Reduce. (Amar Kamat via yhemanth)
- HADOOP-6382. Import the mavenizable pom file structure and adjust the build targets and bin scripts. (gkesvan via ltucker)
- MAPREDUCE-1425. archive throws OutOfMemoryError (mahadev)
- MAPREDUCE-1399. The archive command shows a null error message. (nicholas)
- HADOOP-6552. Puts renewTGT=true and useTicketCache=true for the keytab kerberos options. (ddas)
- MAPREDUCE-1433. Adds delegation token for MapReduce (ddas)
- HADOOP-4359. Fixes a bug in the earlier backport. (ddas)
- HADOOP-6547, HDFS-949, MAPREDUCE-1470. Move Delegation token into Common so that we can use it for MapReduce also. It is a combined patch for common, hdfs and mr. (jitendra)
- HADOOP-6510,HDFS-935,MAPREDUCE-1464. Support for doAs to allow authenticated superuser to impersonate proxy users. It is a combined patch with compatible fixes in HDFS and MR. (jitendra)
- MAPREDUCE-1435. Fixes the way symlinks are handled when cleaning up work directory files. (Ravi Gummadi via yhemanth)
- MAPREDUCE-6419. Fixes a bug in the backported patch. (ddas)
- MAPREDUCE-1457. Fixes JobTracker to get the FileSystem object within getStagingAreaDir within a privileged block. Fixes Child.java to use the appropriate UGIs while getting the TaskUmbilicalProtocol proxy and while executing the task. Contributed by Jakob Homan. (ddas)
- MAPREDUCE-1440. Replace the long user name in MapReduce with the local name. (ddas)
- HADOOP-6419. Adds SASL based authentication to RPC. Also includes the MAPREDUCE-1335 and HDFS-933 patches. Contributed by Kan Zhang. (ddas) HADOOP-6538. Sets hadoop.security.authentication to simple by default. (ddas)
- HDFS-938. Replace calls to UGI.getUserName() with UGI.getShortUserName()(boryas)
- HADOOP-6544. fix ivy settings to include JSON jackson.codehause.org libs for .20 (boryas) HDFS-907. Add tests for getBlockLocations and totalLoad metrics. (rphulari)
- HADOOP-6204. Implementing aspects development and fault injeciton framework for Hadoop (cos)
- MAPREDUCE-1432. Adds hooks in the jobtracker and tasktracker for loading the tokens in the user's ugi. This is required for the copying of files from the hdfs. (Devaraj Das vi boryas)
- MAPREDUCE-1383. Automates fetching of delegation tokens in File*Formats Distributed Cache and Distcp. Also, provides a config mapreduce.job.hdfs-servers that the jobs can populate with a comma separated list of namenodes. The job client automatically fetches delegation tokens from those namenodes.
- HADOOP-6337. Update FilterInitializer class to be more visible and take a conf for further development. (jhoman)
- HADOOP-6520. UGI should load tokens from the environment. (jitendra)
- HADOOP-6517, HADOOP-6518. Ability to add/get tokens from UserGroupInformation & Kerberos login in UGI should honor KRB5CCNAME (jitendra)
- HADOOP-6299. Reimplement the UserGroupInformation to use the OS specific and Kerberos JAAS login. (jhoman, ddas, oom) HADOOP-6524. Contrib tests are failing Clover'ed build. (cos)
- MAPREDUCE-842. Fixing a bug in the earlier version of the patch related to improper localization of the job token file. (Ravi Gummadi via yhemanth)
- HDFS-919. Create test to validate the BlocksVerified metric (Gary Murry via cos)
- MAPREDUCE-1186. Modified code in distributed cache to set permissions only on required set of localized paths. (Amareshwari Sriramadasu via yhemanth)
- HDFS-899. Delegation Token Implementation. (Jitendra Nath Pandey)
- MAPREDUCE-896. Enhance tasktracker to cleanup files that might have been created by user tasks with non-writable permissions. (Ravi Gummadi via yhemanth)
- HADOOP-5879. Read compression level and strategy from Configuration for gzip compression. (He Yongqiang via cdouglas)
- HADOOP-6161. Add get/setEnum methods to Configuration. (cdouglas)
- HADOOP-6382 Mavenize the build.xml targets and update the bin scripts in preparation for publishing POM files (giri kesavan via ltucker)
- HDFS-737. Add full path name of the file to the block information and summary of total number of files, blocks, live and deadnodes to metasave output. (Jitendra Nath Pandey via suresh)
- HADOOP-6577. Add hidden configuration option "ipc.server.max.response.size" to change the default 1 MB, the maximum size when large IPC handler response buffer is reset. (suresh)
- HADOOP-6521. Fix backward compatiblity issue with umask when applications use deprecated param dfs.umask in configuration or use FsPermission.setUMask(). (suresh)
- HDFS-737. Add full path name of the file to the block information and summary of total number of files, blocks, live and deadnodes to metasave output. (Jitendra Nath Pandey via suresh)
- HADOOP-6521. Fix backward compatiblity issue with umask when applications use deprecated param dfs.umask in configuration or use FsPermission.setUMask(). (suresh)
- MAPREDUCE-433. Use more reliable counters in TestReduceFetch. (Christopher Douglas via ddas)
- MAPREDUCE-744. Introduces the notion of a public distributed cache. (ddas)
- MAPREDUCE-1140. Fix DistributedCache to not decrement reference counts for unreferenced files in error conditions. (Amareshwari Sriramadasu via yhemanth)
- MAPREDUCE-1284. Fix fts_open() call in task-controller that was failing LinuxTaskController unit tests. (Ravi Gummadi via yhemanth)
- MAPREDUCE-1098. Fixed the distributed-cache to not do i/o while holding a global lock. (Amareshwari Sriramadasu via acmurthy)
- MAPREDUCE-1338. Introduces the notion of token cache using which tokens and secrets can be sent by the Job client to the JobTracker. (Boris Shkolnik)
- HADOOP-6495. Identifier should be serialized after the password is created In Token constructor. (Jitendra Nath Pandey)
- HADOOP-6506. Failing tests prevent the rest of test targets from execution. (cos)
- HADOOP-5457. Fix to continue to run builds even if contrib test fails. (gkesavan)
- MAPREDUCE-856. Setup secure permissions for distributed cache files. (Vinod Kumar Vavilapalli via yhemanth)
- MAPREDUCE-871. Fix ownership of Job/Task local files to have correct group ownership according to the egid of the tasktracker. (Vinod Kumar Vavilapalli via yhemanth) MAPREDUCE-476. Extend DistributedCache to work locally (LocalJobRunner). (Philip Zeyliger via tomwhite)
- MAPREDUCE-711. Removed Distributed Cache from Common, to move it under Map/Reduce. (Vinod Kumar Vavilapalli via yhemanth)
- MAPREDUCE-478. Allow map and reduce jvm parameters, environment variables and ulimit to be set separately. (acmurthy) MAPREDUCE-842. Setup secure permissions for localized job files, intermediate outputs and log files on tasktrackers. (Vinod Kumar Vavilapalli via yhemanth)
- MAPREDUCE-408. Fixes an assertion problem in TestKillSubProcesses. (Ravi Gummadi via ddas)
- HADOOP-4041. IsolationRunner does not work as documented. (Philip Zeyliger via tomwhite)
- MAPREDUCE-181. Changes the job submission process to be secure. (Devaraj Das)
- HADOOP-5737. Fixes a problem in the way the JobTracker used to talk to other daemons like the NameNode to get the job's files. Also adds APIs in the JobTracker to get the FileSystem objects as per the JobTracker's configuration. (Amar Kamat via ddas) HADOOP-5771. Implements unit tests for LinuxTaskController. (Sreekanth Ramakrishnan and Vinod Kumar Vavilapalli via yhemanth)
- HADOOP-4656, HDFS-685, MAPREDUCE-1083. Use the user-to-groups mapping service in the NameNode and JobTracker. Combined patch for these 3 jiras otherwise tests fail. (Jitendra Nath Pandey)
- MAPREDUCE-1250. Refactor job token to use a common token interface. (Jitendra Nath Pandey)
- MAPREDUCE-1026. Shuffle should be secure. (Jitendra Nath Pandey)
- HADOOP-4268. Permission checking in fsck. (Jitendra Nath Pandey)
- HADOOP-6415. Adding a common token interface for both job token and delegation token. (Jitendra Nath Pandey)
- HADOOP-6367, HDFS-764. Moving Access Token implementation from Common to HDFS. These two jiras must be committed together otherwise build will fail. (Jitendra Nath Pandey)
- HDFS-409. Add more access token tests (Jitendra Nath Pandey)
- HADOOP-6132. RPC client opens an extra connection for VersionedProtocol. (Jitendra Nath Pandey)
- HDFS-445. pread() fails when cached block locations are no longer valid. (Jitendra Nath Pandey)
- HDFS-195. Need to handle access token expiration when re-establishing the pipeline for dfs write. (Jitendra Nath Pandey)
- HADOOP-6176. Adding a couple private methods to AccessTokenHandler for testing purposes. (Jitendra Nath Pandey)
- HADOOP-5824. remove OP_READ_METADATA functionality from Datanode. (Jitendra Nath Pandey)
- HADOOP-4359. Access Token: Support for data access authorization checking on DataNodes. (Jitendra Nath Pandey)
- MAPREDUCE-1372. Fixed a ConcurrentModificationException in jobtracker. (Arun C Murthy via yhemanth)
- MAPREDUCE-1316. Fix jobs' retirement from the JobTracker to prevent memory leaks via stale references. (Amar Kamat via acmurthy)
- MAPREDUCE-1342. Fixed deadlock in global blacklisting of tasktrackers. (Amareshwari Sriramadasu via acmurthy)
- HADOOP-6460. Reinitializes buffers used for serializing responses in ipc server on exceeding maximum response size to free up Java heap. (suresh)
- MAPREDUCE-1100. Truncate user logs to prevent TaskTrackers' disks from filling up. (Vinod Kumar Vavilapalli via acmurthy)
- MAPREDUCE-1143. Fix running task counters to be updated correctly when speculative attempts are running for a TIP. (Rahul Kumar Singh via yhemanth)
- HADOOP-6151, 6281, 6285, 6441. Add HTML quoting of the parameters to all of the servlets to prevent XSS attacks. (omalley)
- MAPREDUCE-896. Fix bug in earlier implementation to prevent spurious logging in tasktracker logs for absent file paths. (Ravi Gummadi via yhemanth)
- MAPREDUCE-676. Fix Hadoop Vaidya to ensure it works for map-only jobs. (Suhas Gogate via acmurthy)
- HADOOP-5582. Fix Hadoop Vaidya to use new Counters in org.apache.hadoop.mapreduce package. (Suhas Gogate via acmurthy)
- HDFS-595. umask settings in configuration may now use octal or symbolic instead of decimal. Update HDFS tests as such. (jghoman)
- MAPREDUCE-1068. Added a verbose error message when user specifies an incorrect -file parameter. (Amareshwari Sriramadasu via acmurthy)
- MAPREDUCE-1171. Allow the read-error notification in shuffle to be configurable. (Amareshwari Sriramadasu via acmurthy)
- MAPREDUCE-353. Allow shuffle read and connection timeouts to be configurable. (Amareshwari Sriramadasu via acmurthy)
- HDFS-781. Namenode metrics PendingDeletionBlocks is not decremented. (suresh) MAPREDUCE-1185. Redirect running job url to history url if job is already retired. (Amareshwari Sriramadasu and Sharad Agarwal via sharad)
- MAPREDUCE-754. Fix NPE in expiry thread when a TT is lost. (Amar Kamat via sharad)
- MAPREDUCE-896. Modify permissions for local files on tasktracker before deletion so they can be deleted cleanly. (Ravi Gummadi via yhemanth) HADOOP-5771. Implements unit tests for LinuxTaskController. (Sreekanth Ramakrishnan and Vinod Kumar Vavilapalli via yhemanth)
- MAPREDUCE-1124. Import Gridmix3 and Rumen. (cdouglas)
- MAPREDUCE-1063. Document gridmix benchmark. (cdouglas)
- HDFS-758. Changes to report status of decommissioining on the namenode web UI. (jitendra)
- HADOOP-6234. Add new option dfs.umaskmode to set umask in configuration to use octal or symbolic instead of decimal. (Jakob Homan via suresh)
- MAPREDUCE-1147. Add map output counters to new API. (Amar Kamat via cdouglas)
- MAPREDUCE-1182. Fix overflow in reduce causing allocations to exceed the configured threshold. (cdouglas)
- HADOOP-4933. Fixes a ConcurrentModificationException problem that shows up when the history viewer is accessed concurrently. (Amar Kamat via ddas)
- MAPREDUCE-1140. Fix DistributedCache to not decrement reference counts for unreferenced files in error conditions. (Amareshwari Sriramadasu via yhemanth)
- HADOOP-6203. FsShell rm/rmr error message indicates exceeding Trash quota and suggests using -skpTrash, when moving to trash fails. (Boris Shkolnik via suresh)
- HADOOP-5675. Do not launch a job if DistCp has no work to do. (Tsz Wo (Nicholas), SZE via cdouglas)
- HDFS-457. Better handling of volume failure in Data Node storage, This fix is a port from hdfs-0.22 to common-0.20 by Boris Shkolnik. Contributed by Erik Steffl
- HDFS-625. Fix NullPointerException thrown from ListPathServlet. Contributed by Suresh Srinivas.
- HADOOP-6343. Log unexpected throwable object caught in RPC. Contributed by Jitendra Nath Pandey
- MAPREDUCE-1186. Fixed DistributedCache to do a recursive chmod on just the per-cache directory, not all of mapred.local.dir. (Amareshwari Sriramadasu via acmurthy)
- MAPREDUCE-1231. Add an option to distcp to ignore checksums when used with the upgrade option. (Jothi Padmanabhan via yhemanth)
- MAPREDUCE-1219. Fixed JobTracker to not collect per-job metrics, thus easing load on it. (Amareshwari Sriramadasu via acmurthy)
- HDFS-761. Fix failure to process rename operation from edits log due to quota verification. (suresh)
- MAPREDUCE-1196. Fix FileOutputCommitter to use the deprecated cleanupJob api correctly. (acmurthy)
- HADOOP-6344. rm and rmr immediately delete files rather than sending to trash, despite trash being enabled, if a user is over-quota. (jhoman)
- MAPREDUCE-1160. Reduce verbosity of log lines in some Map/Reduce classes to avoid filling up jobtracker logs on a busy cluster. (Ravi Gummadi and Hong Tang via yhemanth)
- HDFS-587. Add ability to run HDFS with MR test on non-default queue, also updated junit dependendcy from junit-3.8.1 to junit-4.5 (to make it possible to use Configured and Tool to process command line to be able to specify a queue). Contributed by Erik Steffl.
- MAPREDUCE-1158. Fix JT running maps and running reduces metrics. (sharad)
- MAPREDUCE-947. Fix bug in earlier implementation that was causing unit tests to fail. (Ravi Gummadi via yhemanth)
- MAPREDUCE-1062. Fix MRReliabilityTest to work with retired jobs (Contributed by Sreekanth Ramakrishnan)
- MAPREDUCE-1090. Modified log statement in TaskMemoryManagerThread to include task attempt id. (yhemanth)
- MAPREDUCE-1098. Fixed the distributed-cache to not do i/o while holding a global lock. (Amareshwari Sriramadasu via acmurthy)
- MAPREDUCE-1048. Add occupied/reserved slot usage summary on jobtracker UI. (Amareshwari Sriramadasu via sharad)
- MAPREDUCE-1103. Added more metrics to Jobtracker. (sharad)
- MAPREDUCE-947. Added commitJob and abortJob apis to OutputCommitter. Enhanced FileOutputCommitter to create a _SUCCESS file for successful jobs. (Amar Kamat & Jothi Padmanabhan via acmurthy)
- MAPREDUCE-1105. Remove max limit configuration in capacity scheduler in favor of max capacity percentage thus allowing the limit to go over queue capacity. (Rahul Kumar Singh via yhemanth)
- MAPREDUCE-1086. Setup Hadoop logging environment for tasks to point to task related parameters. (Ravi Gummadi via yhemanth)
- MAPREDUCE-739. Allow relative paths to be created inside archives. (mahadev)
- HADOOP-6097. Multiple bugs w/ Hadoop archives (mahadev)
- HADOOP-6231. Allow caching of filesystem instances to be disabled on a per-instance basis (ben slusky via mahadev)
- MAPREDUCE-826. harchive doesn't use ToolRunner / harchive returns 0 even if the job fails with exception (koji via mahadev)
- HDFS-686. NullPointerException is thrown while merging edit log and image. (hairong)
- HDFS-709. Fix TestDFSShell failure due to rename bug introduced by HDFS-677. (suresh)
- HDFS-677. Rename failure when both source and destination quota exceeds results in deletion of source. (suresh)
- HADOOP-6284. Add a new parameter, HADOOP_JAVA_PLATFORM_OPTS, to hadoop-config.sh so that it allows setting java command options for JAVA_PLATFORM. (Koji Noguchi via szetszwo)
- MAPREDUCE-732. Removed spurious log statements in the node blacklisting logic. (Sreekanth Ramakrishnan via yhemanth)
- MAPREDUCE-144. Includes dump of the process tree in task diagnostics when a task is killed due to exceeding memory limits. (Vinod Kumar Vavilapalli via yhemanth)
- MAPREDUCE-979. Fixed JobConf APIs related to memory parameters to return values of new configuration variables when deprecated variables are disabled. (Sreekanth Ramakrishnan via yhemanth)
- MAPREDUCE-277. Makes job history counters available on the job history viewers. (Jothi Padmanabhan via ddas)
- HADOOP-5625. Add operation duration to clienttrace. (Lei Xu via cdouglas)
- HADOOP-5222. Add offset to datanode clienttrace. (Lei Xu via cdouglas)
- HADOOP-6218. Adds a feature where TFile can be split by Record Sequence number. Contributed by Hong Tang and Raghu Angadi.
- MAPREDUCE-1088. Changed permissions on JobHistory files on local disk to 0744. Contributed by Arun C. Murthy.
- HADOOP-6304. Use java.io.File.set{Readable|Writable|Executable} where possible in RawLocalFileSystem. Contributed by Arun C. Murthy. MAPREDUCE-270. Fix the tasktracker to optionally send an out-of-band heartbeat on task-completion for better job-latency. Contributed by Arun C. Murthy Configuration changes: add mapreduce.tasktracker.outofband.heartbeat
- MAPREDUCE-1030. Fix capacity-scheduler to assign a map and a reduce task per-heartbeat. Contributed by Rahuk K Singh.
- MAPREDUCE-1028. Fixed number of slots occupied by cleanup tasks to one irrespective of slot size for the job. Contributed by Ravi Gummadi.
- MAPREDUCE-964. Fixed start and finish times of TaskStatus to be consistent, thereby fixing inconsistencies in metering tasks. Contributed by Sreekanth Ramakrishnan.
- HADOOP-5976. Add a new command, classpath, to the hadoop script. Contributed by Owen O'Malley and Gary Murry
- HADOOP-5784. Makes the number of heartbeats that should arrive a second at the JobTracker configurable. Contributed by Amareshwari Sriramadasu.
- MAPREDUCE-945. Modifies MRBench and TestMapRed to use ToolRunner so that options such as queue name can be passed via command line. Contributed by Sreekanth Ramakrishnan.
- HADOOP:5420 Correct bug in earlier implementation by Arun C. Murthy
- HADOOP-5363 Add support for proxying connections to multiple clusters with different versions to hdfsproxy. Contributed by Zhiyong Zhang
- HADOOP-5780. Improve per block message prited by -metaSave in HDFS. (Raghu Angadi)
- HADOOP-6227. Fix Configuration to allow final parameters to be set to null and prevent them from being overridden. Contributed by Amareshwari Sriramadasu.
- MAPREDUCE-430 Added patch supplied by Amar Kamat to allow roll forward on branch to includ externally committed patch.
- MAPREDUCE-768. Provide an option to dump jobtracker configuration in JSON format to standard output. Contributed by V.V.Chaitanya
- MAPREDUCE-834 Correct an issue created by merging this issue with patch attached to external Jira.
- HADOOP-6184 Provide an API to dump Configuration in a JSON format. Contributed by V.V.Chaitanya Krishna.
- MAPREDUCE-745 Patch added for this issue to allow branch-0.20 to merge cleanly.
- MAPREDUCE-478 Allow map and reduce jvm parameters, environment variables and ulimit to be set separately.
- MAPREDUCE-682 Removes reservations on tasktrackers which are blacklisted. Contributed by Sreekanth Ramakrishnan.
- HADOOP:5420 Support killing of process groups in LinuxTaskController binary
- HADOOP-5488 Removes the pidfile management for the Task JVM from the framework and instead passes the PID back and forth between the TaskTracker and the Task processes. Contributed by Ravi Gummadi.
- MAPREDUCE-467 Provide ability to collect statistics about total tasks and succeeded tasks in different time windows.
- MAPREDUCE-817. Add a cache for retired jobs with minimal job info and provide a way to access history file url
- MAPREDUCE-814. Provide a way to configure completed job history files to be on HDFS.
- MAPREDUCE-838 Fixes a problem in the way commit of task outputs happens. The bug was that even if commit failed, the task would be declared as successful. Contributed by Amareshwari Sriramadasu.
- MAPREDUCE-809 Fix job-summary logs to correctly record final status of FAILED and KILLED jobs.
- MAPREDUCE-740 Log a job-summary at the end of a job, while allowing it to be configured to use a custom appender if desired.
- MAPREDUCE-771 Fixes a bug which delays normal jobs in favor of high-ram jobs.
- HADOOP-5420 Support setsid based kill in LinuxTaskController.
- MAPREDUCE-733 Fixes a bug that when a task tracker is killed , it throws exception. Instead it should catch it and process it and allow the rest of the flow to go through
- MAPREDUCE-734 Fixes a bug which prevented hi ram jobs from being removed from the scheduler queue.
- MAPREDUCE-693 Fixes a bug that when a job is submitted and the JT is restarted (before job files have been written) and the job is killed after recovery, the conf files fail to be moved to the "done" subdirectory.
- MAPREDUCE-722 Fixes a bug where more slots are getting reserved for HiRAM job tasks than required.
- MAPREDUCE-683 TestJobTrackerRestart failed because of stale filemanager cache (which was created once per jvm). This patch makes sure that the filemanager is inited upon every JobHistory.init() and hence upon every restart. Note that this wont happen in production as upon a restart the new jobtracker will start in a new jvm and hence a new cache will be created.
- MAPREDUCE-709 Fixes a bug where node health check script does not display the correct message on timeout.
- MAPREDUCE-708 Fixes a bug where node health check script does not refresh the "reason for blacklisting".
- MAPREDUCE-522 Rewrote TestQueueCapacities to make it simpler and avoid timeout errors.
- MAPREDUCE-532 Provided ability in the capacity scheduler to limit the number of slots that can be concurrently used per queue at any given time.
- MAPREDUCE-211 Provides ability to run a health check script on the tasktracker nodes and blacklist nodes if they are unhealthy. Contributed by Sreekanth Ramakrishnan.
- MAPREDUCE-516 Remove .orig file included by mistake.
- MAPREDUCE-416 Moves the history file to a "done" folder whenever a job completes.
- HADOOP-5980 Previously, task spawned off by LinuxTaskController didn't get LD_LIBRARY_PATH in their environment. The tasks will now get same LD_LIBRARY_PATH value as when spawned off by DefaultTaskController.
- HADOOP-5981 This issue completes the feature mentioned in HADOOP-2838. HADOOP-2838 provided a way to set env variables in child process. This issue provides a way to inherit tt's env variables and append or reset it. So now X=$X:y will inherit X (if there) and append y to it.
- HADOOP-5419 This issue is to provide an improvement on the existing M/R framework to let users know which queues they have access to, and for what operations. One use case for this would that currently there is no easy way to know if the user has access to submit jobs to a queue, until it fails with an access control exception.
- HADOOP-5420 Support setsid based kill in LinuxTaskController.
- HADOOP-5643 Added the functionality to refresh jobtrackers node list via command line (bin/hadoop mradmin -refreshNodes). The command should be run as the jobtracker owner (jobtracker process owner) or from a super group (mapred.permissions.supergroup).
- HADOOP-2838 Now the users can set environment variables using mapred.child.env. They can do the following X=Y : set X to Y X=$X:Y : Append Y to X (which should be taken from the tasktracker) HADOOP-5818. Revert the renaming from FSNamesystem.checkSuperuserPrivilege to checkAccess by HADOOP-5643. (Amar Kamat via szetszwo)
- HADOOP-5801. Fixes the problem: If the hosts file is changed across restart then it should be refreshed upon recovery so that the excluded hosts are lost and the maps are re-executed. (Amar Kamat via ddas)
- HADOOP-5643. HADOOP-5643. Adds a way to decommission TaskTrackers while the JobTracker is running. (Amar Kamat via ddas)
- HADOOP-5419. Provide a facility to query the Queue ACLs for the current user. (Rahul Kumar Singh via yhemanth)
- HADOOP-5733. Add map/reduce slot capacity and blacklisted capacity to JobTracker metrics. (Sreekanth Ramakrishnan via cdouglas)
- HADOOP-5738. Split "waiting_tasks" JobTracker metric into waiting maps and waiting reduces. (Sreekanth Ramakrishnan via cdouglas)
- HADOOP-4842. Streaming now allows specifiying a command for the combiner. (Amareshwari Sriramadasu via ddas)
- HADOOP-4490. Provide ability to run tasks as job owners. (Sreekanth Ramakrishnan via yhemanth)
- HADOOP-5442. Paginate jobhistory display and added some search capabilities. (Amar Kamat via acmurthy)
- HADOOP-3327. Improves handling of READ_TIMEOUT during map output copying. (Amareshwari Sriramadasu via ddas)
- HADOOP-5113. Fixed logcondense to remove files for usernames beginning with characters specified in the -l option. (Peeyush Bishnoi via yhemanth)
- HADOOP-2898. Provide an option to specify a port range for Hadoop services provisioned by HOD. (Peeyush Bishnoi via yhemanth)
- HADOOP-4930. Implement a Linux native executable that can be used to launch tasks as users. (Sreekanth Ramakrishnan via yhemanth)