[ 
https://issues.apache.org/jira/browse/HADOOP-15123?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Steve Loughran updated HADOOP-15123:
------------------------------------
       Resolution: Fixed
    Fix Version/s: 3.0.1
                   2.10.0
                   3.1.0
           Status: Resolved  (was: Patch Available)

> KDiag tries to load krb5.conf from KRB5CCNAME instead of KRB5_CONFIG
> --------------------------------------------------------------------
>
>                 Key: HADOOP-15123
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15123
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.8.0, 2.9.0, 3.0.0
>            Reporter: Vipin Rathor
>            Assignee: Vipin Rathor
>            Priority: Minor
>             Fix For: 3.1.0, 2.10.0, 3.0.1
>
>         Attachments: HADOOP-15123.0001.patch, HADOOP-15123.0002.patch
>
>
> If Kerberos credential cache file location is overridden in environment, then 
> KDiag tries to read its value for Kerberos configuration. For example,
> {code:java}
> # export KRB5CCNAME=/tmp/krb5cc_1001
> # hadoop org.apache.hadoop.security.KDiag
> ...
> ...
> == Locating Kerberos configuration file ==
> Setting kerberos path from environment variable KRB5CCNAME: "/tmp/krb5cc_1001"
> Kerberos configuration file = /tmp/krb5cc_1001
> 17/12/16 04:06:19 ERROR security.KDiag: 
> java.util.UnknownFormatConversionException: Conversion = '�'
> java.util.UnknownFormatConversionException: Conversion = '�'
> {code}
> Expected Behavior:
> 1. Kerberos configuration file location should be read from KRB5_CONFIG env. 
> variable instead of KRB5CCNAME. Source: [MIT KRB5 
> doc|https://web.mit.edu/kerberos/krb5-1.12/doc/admin/conf_files/krb5_conf.html]



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to