joshelser commented on pull request #132:
URL: https://github.com/apache/calcite-avatica/pull/132#issuecomment-944810771
Finally got the time to revisit this. Sure enough, the java solution worked
out of the box again and the python approach failed.
I started poking around with GDB, which lead to LLDB, which was able to show
me:
```
* thread #1, queue = 'com.apple.main-thread', stop reason = signal SIGSTOP
* frame #0: 0x00007fff202fe656 libsystem_kernel.dylib`__select + 10
frame #1: 0x00007fff2b68fbc5 Heimdal`wait_response + 1125
frame #2: 0x00007fff2b68ebed Heimdal`krb5_sendto_context + 1229
frame #3: 0x00007fff2b65995c Heimdal`get_cred_kdc + 1404
frame #4: 0x00007fff2b65b80a Heimdal`get_cred_kdc_address + 346
frame #5: 0x00007fff2b65a33d Heimdal`get_cred_kdc_referral + 941
frame #6: 0x00007fff2b659ec4 Heimdal`_krb5_get_cred_kdc_any + 548
frame #7: 0x00007fff2b63e43b Heimdal`krb5_get_credentials_with_flags +
1467
frame #8: 0x00007fff2b63de6d Heimdal`krb5_get_credentials + 61
frame #9: 0x00007fff2d6ddbc1 GSS`gsskrb5_get_creds + 497
frame #10: 0x00007fff2d6dd84c GSS`init_krb5_auth + 812
frame #11: 0x00007fff2d6dcef5 GSS`_gsskrb5_init_sec_context + 965
frame #12: 0x00007fff2d6dc0d9 GSS`gss_init_sec_context + 1209
frame #13: 0x00007fff2d6e3984 GSS`initiator_approved + 196
frame #14: 0x00007fff2d6e2f66 GSS`_gss_spnego_indicate_mechtypelist + 294
frame #15: 0x00007fff2d6e299c GSS`spnego_initial + 556
frame #16: 0x00007fff2d6e2584 GSS`_gss_spnego_init_sec_context + 292
frame #17: 0x00007fff2d6dc0d9 GSS`gss_init_sec_context + 1209
```
Meaning, requests-gssapi was using gssapi which was calling out to the
OSX-provided Heimdal libraries instead of the MIT kerberos libraries I intended
to be used. I popped open a Linux docker container and the same python code
worked immediately.
It seems like something with the Heimdal libraries that get bundled with OSX
don't work with the current SPNEGO code in Jetty. I have no interest in trying
to debug that :). I'm gonna work on getting this code cleaned up and a real
pull request published.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
