[STORM-4155] SecurityManager Issue with JDK 23 in Apache Storm

[jira-importer]

UnsupportedOperationException error message with jdk-23

2025-01-23 20:17:21.923 [ERROR] o.a.s.s.o.a.c.f.l.MappingListenerManager main-EventThread 
Listener (org.apache.storm.zookeeper.LeaderListenerCallbackFactory$1@3374b5bc) threw an exceptionjava.lang.UnsupportedOperationException: getSubject is supported only if a security manager is allowed
    at java.base/javax.security.auth.Subject.getSubject(Subject.java:347) ~[?:?]
    at org.apache.storm.security.auth.ReqContext.(ReqContext.java:51) ~[storm-client-2.8.0.jar:2.8.0]
    at org.apache.storm.security.auth.ReqContext.lambda$static$0(ReqContext.java:42) ~[storm-client-2.8.0.jar:2.8.0]
    at java.base/java.lang.ThreadLocal$SuppliedThreadLocal.initialValue(ThreadLocal.java:357) ~[?:?]
    at java.base/java.lang.ThreadLocal.setInitialValue(ThreadLocal.java:225) ~[?:?]
    at java.base/java.lang.ThreadLocal.get(ThreadLocal.java:194) ~[?:?]
    at java.base/java.lang.ThreadLocal.get(ThreadLocal.java:172) ~[?:?]
    at org.apache.storm.security.auth.ReqContext.context(ReqContext.java:78) ~[storm-client-2.8.0.jar:2.8.0]
    at org.apache.storm.nimbus.LeaderListenerCallback.getTopologyDependencyKeys(LeaderListenerCallback.java:205) ~[storm-server-2.8.0.jar:2.8.0]
    at org.apache.storm.nimbus.LeaderListenerCallback.leaderCallBack(LeaderListenerCallback.java:127) ~[storm-server-2.8.0.jar:2.8.0]
    at org.apache.storm.zookeeper.LeaderListenerCallbackFactory$1.isLeader(LeaderListenerCallbackFactory.java:70) ~[storm-server-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.listen.MappingListenerManager.lambda$forEach$0(MappingListenerManager.java:82) ~[storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.listen.MappingListenerManager.forEach(MappingListenerManager.java:80) ~[storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.listen.StandardListenerManager.forEach(StandardListenerManager.java:81) ~[storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.recipes.leader.LeaderLatch.setLeadership(LeaderLatch.java:657) ~[storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.recipes.leader.LeaderLatch.lambda$checkLeadership$0(LeaderLatch.java:568) ~[storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.imps.CuratorFrameworkImpl.sendToBackgroundCallback(CuratorFrameworkImpl.java:953) [storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.imps.CuratorFrameworkImpl.processBackgroundOperation(CuratorFrameworkImpl.java:666) [storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.imps.WatcherRemovalFacade.processBackgroundOperation(WatcherRemovalFacade.java:131) [storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.curator.framework.imps.GetDataBuilderImpl$3.processResult(GetDataBuilderImpl.java:250) [storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.zookeeper.ClientCnxn$EventThread.processEvent(ClientCnxn.java:623) [storm-shaded-deps-2.8.0.jar:2.8.0]
    at org.apache.storm.shade.org.apache.zookeeper.ClientCnxn$EventThread.run(ClientCnxn.java:542) [storm-shaded-deps-2.8.0.jar:2.8.0]

 

---

Originally reported by puru, imported from: SecurityManager Issue with JDK 23 in Apache Storm

• status: Open
• priority: Major
• resolution: Unresolved
• imported: 2025-01-24

[rzo1]

@purushah Are you working on it? Perhaps, we should add 23+ to our GitHub workflow and see, if we have other failures and prepare for it.

[purushah]

@rzo1 I am not looking into it right now, but adding 23+ to the GitHub workflow sounds like a good idea. Let’s see if it uncovers any other failures.

[gangadharfluxgen]

When I pass -Djava.security.manager=allow it's working fine.

Can anyone suggest any method to pass this flag to storm?

[reiabreu]

You can edit the storm/conf/storm.yaml file and add the flag to: - worker.childopts - supervisor.childopts - nimbus.childopts

…

On Mon, 10 Feb 2025 at 09:57, Gangadhara ***@***.***> wrote: When I pass -Djava.security.manager=allow it's working fine. Can anyone suggest any method to pass this flag to storm? — Reply to this email directly, view it on GitHub <#7935 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG5GIXM6A3DS5B6OET4TO32PBZYLAVCNFSM6AAAAABWO3JDUKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNBXGQ4DMMBXG4> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>