{"record":{"id":"88933a16cfc305c9","repo":"apache/hadoop","slug":"keyprovider-s-cannot-renew-token-s","errorCode":null,"errorMessage":"keyProvider %s cannot renew token [%s]","messagePattern":"keyProvider (.+?) cannot renew token \\[(.+?)\\]","errorType":"exception","errorClass":"IOException","httpStatus":null,"severity":"error","filePath":"hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java","lineNumber":196,"sourceCode":"\n    @Override\n    public boolean handleKind(Text kind) {\n      return kind.equals(TOKEN_KIND);\n    }\n\n    @Override\n    public boolean isManaged(Token<?> token) throws IOException {\n      return true;\n    }\n\n    @Override\n    public long renew(Token<?> token, Configuration conf) throws IOException {\n      LOG.debug(\"Renewing delegation token {}\", token);\n      KeyProvider keyProvider = createKeyProvider(token, conf);\n      try {\n        if (!(keyProvider instanceof\n            KeyProviderDelegationTokenExtension.DelegationTokenExtension)) {\n          throw new IOException(String\n              .format(\"keyProvider %s cannot renew token [%s]\",\n                  keyProvider == null ? \"null\" : keyProvider.getClass(),\n                  token));\n        }\n        return ((KeyProviderDelegationTokenExtension.DelegationTokenExtension)\n            keyProvider).renewDelegationToken(token);\n      } finally {\n        if (keyProvider != null) {\n          keyProvider.close();\n        }\n      }\n    }\n\n    @Override\n    public void cancel(Token<?> token, Configuration conf) throws IOException {\n      LOG.debug(\"Canceling delegation token {}\", token);\n      KeyProvider keyProvider = createKeyProvider(token, conf);\n      try {","sourceCodeStart":178,"sourceCodeEnd":214,"githubUrl":"https://github.com/apache/hadoop/blob/2add9630210752f88ceb1bb74eb65e37bf41da8e/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/crypto/key/kms/KMSClientProvider.java#L178-L214","documentation":"Error \"keyProvider %s cannot renew token [%s]\" thrown in apache/hadoop.","triggerScenarios":"Raised at runtime when the documented precondition or configuration requirement for this operation is violated.","commonSituations":"Misconfigured or missing property, invalid user input, or calling the API before its prerequisites are met.","solutions":["KMS delegation tokens cannot be renewed through the KeyProvider; renew them via the KMS client or let them expire and re-acquire."],"exampleFix":"Use Token.renew through the KMS delegation token renewer.","handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"2add9630210752f88ceb1bb74eb65e37bf41da8e","analyzedAt":"2026-08-22T19:55:07.957Z","schemaVersion":2},"datasetVersion":"2026-08-23T01:17:44.959Z"}