[ 
https://issues.apache.org/jira/browse/AIRFLOW-987?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15925625#comment-15925625
 ] 

Bolke de Bruin commented on AIRFLOW-987:
----------------------------------------

I cannot reproduce it and we are using kerberos in production. The error you 
are showing comes from kerberos and not from airflow. So you need to be very 
elaborate why you think this is an airflow bug and not a configuration issue.

> `airflow kerberos` ignores --keytab and --principal arguments
> -------------------------------------------------------------
>
>                 Key: AIRFLOW-987
>                 URL: https://issues.apache.org/jira/browse/AIRFLOW-987
>             Project: Apache Airflow
>          Issue Type: Bug
>          Components: security
>    Affects Versions: Airflow 1.8
>         Environment: 1.8-rc5
>            Reporter: Ruslan Dautkhanov
>            Assignee: Bolke de Bruin
>              Labels: easyfix, kerberos, security
>
> No matter which arguments I pass to `airflow kerberos`, 
> it always executes as `kinit -r 3600m -k -t airflow.keytab -c 
> /tmp/airflow_krb5_ccache airflow`
> So it failes with expected "kinit: Keytab contains no suitable keys for 
> [email protected] while getting initial credentials"
> Tried different arguments, -kt and --keytab, here's one of the runs (some 
> lines wrapped for readability):
> {noformat}
> $ airflow kerberos -kt /home/rdautkha/.keytab [email protected]
> [2017-03-14 23:50:11,523] {__init__.py:57} INFO - Using executor LocalExecutor
> [2017-03-14 23:50:12,069] {kerberos.py:43} INFO - Reinitting kerberos from 
> keytab: 
> kinit -r 3600m -k -t airflow.keytab -c /tmp/airflow_krb5_ccache airflow
> [2017-03-14 23:50:12,080] {kerberos.py:55} ERROR -
>  Couldn't reinit from keytab! `kinit' exited with 1.
> kinit: Keytab contains no suitable keys for [email protected] 
> while getting initial credentials
> {noformat}
> 1.8-rc5



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Reply via email to