[
https://issues.apache.org/jira/browse/HADOOP-15996?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16730820#comment-16730820
]
Hadoop QA commented on HADOOP-15996:
------------------------------------
| (x) *{color:red}-1 overall{color}* |
\\
\\
|| Vote || Subsystem || Runtime || Comment ||
| {color:blue}0{color} | {color:blue} reexec {color} | {color:blue} 0m
23s{color} | {color:blue} Docker mode activated. {color} |
|| || || || {color:brown} Prechecks {color} ||
| {color:green}+1{color} | {color:green} @author {color} | {color:green} 0m
0s{color} | {color:green} The patch does not contain any @author tags. {color} |
| {color:green}+1{color} | {color:green} test4tests {color} | {color:green} 0m
0s{color} | {color:green} The patch appears to include 5 new or modified test
files. {color} |
|| || || || {color:brown} trunk Compile Tests {color} ||
| {color:blue}0{color} | {color:blue} mvndep {color} | {color:blue} 0m
11s{color} | {color:blue} Maven dependency ordering for branch {color} |
| {color:green}+1{color} | {color:green} mvninstall {color} | {color:green} 22m
10s{color} | {color:green} trunk passed {color} |
| {color:green}+1{color} | {color:green} compile {color} | {color:green} 18m
48s{color} | {color:green} trunk passed {color} |
| {color:green}+1{color} | {color:green} checkstyle {color} | {color:green} 0m
59s{color} | {color:green} trunk passed {color} |
| {color:green}+1{color} | {color:green} mvnsite {color} | {color:green} 1m
46s{color} | {color:green} trunk passed {color} |
| {color:green}+1{color} | {color:green} shadedclient {color} | {color:green}
15m 17s{color} | {color:green} branch has no errors when building and testing
our client artifacts. {color} |
| {color:green}+1{color} | {color:green} findbugs {color} | {color:green} 2m
15s{color} | {color:green} trunk passed {color} |
| {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 1m
25s{color} | {color:green} trunk passed {color} |
|| || || || {color:brown} Patch Compile Tests {color} ||
| {color:blue}0{color} | {color:blue} mvndep {color} | {color:blue} 0m
11s{color} | {color:blue} Maven dependency ordering for patch {color} |
| {color:green}+1{color} | {color:green} mvninstall {color} | {color:green} 1m
11s{color} | {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} compile {color} | {color:green} 14m
55s{color} | {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} javac {color} | {color:green} 14m
55s{color} | {color:green} the patch passed {color} |
| {color:orange}-0{color} | {color:orange} checkstyle {color} | {color:orange}
1m 2s{color} | {color:orange} hadoop-common-project: The patch generated 7 new
+ 276 unchanged - 1 fixed = 283 total (was 277) {color} |
| {color:green}+1{color} | {color:green} mvnsite {color} | {color:green} 1m
44s{color} | {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} whitespace {color} | {color:green} 0m
0s{color} | {color:green} The patch has no whitespace issues. {color} |
| {color:green}+1{color} | {color:green} xml {color} | {color:green} 0m
2s{color} | {color:green} The patch has no ill-formed XML file. {color} |
| {color:red}-1{color} | {color:red} shadedclient {color} | {color:red} 11m
58s{color} | {color:red} patch has errors when building and testing our client
artifacts. {color} |
| {color:green}+1{color} | {color:green} findbugs {color} | {color:green} 2m
32s{color} | {color:green} the patch passed {color} |
| {color:green}+1{color} | {color:green} javadoc {color} | {color:green} 1m
26s{color} | {color:green} the patch passed {color} |
|| || || || {color:brown} Other Tests {color} ||
| {color:red}-1{color} | {color:red} unit {color} | {color:red} 3m 22s{color}
| {color:red} hadoop-auth in the patch failed. {color} |
| {color:red}-1{color} | {color:red} unit {color} | {color:red} 7m 3s{color}
| {color:red} hadoop-common in the patch failed. {color} |
| {color:green}+1{color} | {color:green} asflicense {color} | {color:green} 0m
38s{color} | {color:green} The patch does not generate ASF License warnings.
{color} |
| {color:black}{color} | {color:black} {color} | {color:black}108m 32s{color} |
{color:black} {color} |
\\
\\
|| Reason || Tests ||
| Failed junit tests |
hadoop.security.authentication.client.TestKerberosAuthenticator |
| | hadoop.io.file.tfile.TestVLong |
| | hadoop.util.TestApplicationClassLoader |
| | hadoop.io.file.tfile.TestTFileByteArrays |
| | hadoop.fs.TestAvroFSInput |
| | hadoop.fs.viewfs.TestViewFileSystemDelegation |
| | hadoop.fs.TestDefaultUri |
| | hadoop.fs.viewfs.TestFcPermissionsLocalFs |
| | hadoop.fs.viewfs.TestViewFsURIs |
| | hadoop.fs.shell.TestCopy |
| | hadoop.fs.shell.TestCopyFromLocal |
| | hadoop.fs.shell.TestPathData |
| | hadoop.ha.TestHealthMonitor |
| | hadoop.fs.TestGetFileBlockLocations |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractSetTimes |
| | hadoop.http.TestHttpServer |
| |
hadoop.security.token.delegation.web.TestDelegationTokenAuthenticationHandlerWithMocks
|
| | hadoop.fs.TestChecksumFileSystem |
| | hadoop.crypto.key.TestKeyProviderFactory |
| | hadoop.security.authorize.TestProxyUsers |
| | hadoop.security.token.delegation.web.TestDelegationTokenManager |
| | hadoop.fs.TestHarFileSystemBasics |
| | hadoop.io.TestSetFile |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractDelete |
| | hadoop.fs.contract.localfs.TestLocalFSContractSeek |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractPathHandle |
| | hadoop.fs.TestTruncatedInputBug |
| | hadoop.fs.TestFSMainOperationsLocalFileSystem |
| | hadoop.fs.contract.localfs.TestLocalFSContractSetTimes |
| | hadoop.fs.TestPath |
| | hadoop.util.TestGenericOptionsParser |
| | hadoop.metrics2.sink.TestRollingFileSystemSink |
| | hadoop.security.TestRaceWhenRelogin |
| | hadoop.crypto.key.TestKeyShell |
| | hadoop.io.file.tfile.TestTFile |
| | hadoop.fs.sftp.TestSFTPFileSystem |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractAppend |
| | hadoop.ipc.TestProtoBufRPCCompatibility |
| | hadoop.fs.viewfs.TestViewfsFileStatus |
| | hadoop.fs.TestTrash |
| | hadoop.fs.TestLocalDirAllocator |
| | hadoop.security.alias.TestCredShell |
| | hadoop.ipc.TestIdentityProviders |
| | hadoop.ipc.TestIPCServerResponder |
| | hadoop.fs.TestFileContextResolveAfs |
| | hadoop.io.TestMapFile |
| | hadoop.fs.shell.TestCopyPreserveFlag |
| | hadoop.cli.TestCLI |
| | hadoop.crypto.key.TestKeyProviderCryptoExtension |
| | hadoop.fs.TestFsShellCopy |
| | hadoop.io.file.tfile.TestTFileSplit |
| | hadoop.ipc.TestAsyncIPC |
| | hadoop.fs.TestFsShell |
| | hadoop.io.TestBloomMapFile |
| | hadoop.fs.shell.find.TestName |
| | hadoop.io.TestSecureIOUtils |
| | hadoop.fs.contract.localfs.TestLocalFSContractOpen |
| | hadoop.io.file.tfile.TestTFileComparators |
| | hadoop.fs.contract.localfs.TestLocalFSContractMkdir |
| | hadoop.crypto.TestCryptoStreamsForLocalFS |
| | hadoop.fs.shell.TestTextCommand |
| | hadoop.fs.shell.TestCount |
| | hadoop.io.file.tfile.TestTFileStreams |
| | hadoop.fs.viewfs.TestViewFsTrash |
| | hadoop.ipc.TestRPCServerShutdown |
| | hadoop.fs.viewfs.TestFcCreateMkdirLocalFs |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractMkdir |
| | hadoop.metrics2.sink.TestRollingFileSystemSinkWithLocal |
| | hadoop.fs.contract.localfs.TestLocalFSContractRename |
| | hadoop.fs.contract.localfs.TestLocalFSContractDelete |
| | hadoop.fs.viewfs.TestFcMainOperationsLocalFs |
| | hadoop.ipc.TestRPCWaitForProxy |
| | hadoop.ha.TestZKFailoverController |
| | hadoop.fs.viewfs.TestFSMainOperationsLocalFileSystem |
| | hadoop.security.token.TestDtUtilShell |
| | hadoop.fs.TestRawLocalFileSystemContract |
| | hadoop.security.authorize.TestAccessControlList |
| | hadoop.security.ssl.TestSSLFactory |
| | hadoop.fs.shell.find.TestPrint0 |
| | hadoop.io.TestSequenceFile |
| | hadoop.io.nativeio.TestNativeIO |
| | hadoop.io.file.tfile.TestTFileNoneCodecsByteArrays |
| | hadoop.fs.viewfs.TestViewFileSystemDelegationTokenSupport |
| | hadoop.security.TestUserFromEnv |
| | hadoop.security.TestFixKerberosTicketOrder |
| | hadoop.io.file.tfile.TestTFileUnsortedByteArrays |
| | hadoop.fs.shell.TestXAttrCommands |
| | hadoop.ipc.TestMiniRPCBenchmark |
| | hadoop.fs.shell.find.TestIname |
| | hadoop.io.file.tfile.TestTFileSeek |
| | hadoop.io.TestSequenceFileSync |
| | hadoop.fs.TestLocalFSFileContextCreateMkdir |
| | hadoop.crypto.key.TestKeyProviderDelegationTokenExtension |
| | hadoop.ipc.TestRPC |
| | hadoop.fs.TestFcLocalFsUtil |
| | hadoop.fs.TestStat |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractSeek |
| | hadoop.ipc.TestProtoBufRpc |
| | hadoop.fs.http.TestHttpFileSystem |
| | hadoop.fs.shell.find.TestFind |
| | hadoop.util.TestDiskChecker |
| | hadoop.fs.TestLocalFSFileContextMainOperations |
| | hadoop.security.TestKDiag |
| | hadoop.io.TestSequenceFileAppend |
| | hadoop.util.TestBasicDiskValidator |
| | hadoop.fs.contract.localfs.TestLocalFSContractGetFileStatus |
| | hadoop.security.alias.TestCredentialProviderFactory |
| | hadoop.ipc.TestIPC |
| | hadoop.fs.contract.localfs.TestLocalFSContractAppend |
| | hadoop.ipc.TestMultipleProtocolServer |
| | hadoop.fs.viewfs.TestChRootedFs |
| | hadoop.security.token.delegation.TestZKDelegationTokenSecretManager |
| | hadoop.fs.TestFsShellReturnCode |
| | hadoop.fs.TestLocalFsFCStatistics |
| | hadoop.io.file.tfile.TestTFileNoneCodecsStreams |
| | hadoop.fs.TestSymlinkLocalFSFileContext |
| | hadoop.fs.viewfs.TestViewFileSystemLocalFileSystem |
| | hadoop.fs.contract.localfs.TestLocalFSContractLoaded |
| | hadoop.security.TestUGIWithMiniKdc |
| | hadoop.fs.shell.find.TestPrint |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractOpen |
| | hadoop.io.file.tfile.TestTFileComparator2 |
| | hadoop.ipc.TestSaslRPC |
| | hadoop.util.TestRunJar |
| | hadoop.fs.viewfs.TestViewFsWithAuthorityLocalFs |
| | hadoop.fs.TestLocalFileSystemPermission |
| | hadoop.security.TestJNIGroupsMapping |
| | hadoop.ipc.TestRPCCallBenchmark |
| | hadoop.fs.shell.TestMove |
| | hadoop.fs.shell.TestLs |
| | hadoop.io.file.tfile.TestTFileJClassComparatorByteArrays |
| | hadoop.ha.TestHealthMonitorWithDedicatedHealthAddress |
| | hadoop.security.TestKDiagNoKDC |
| | hadoop.fs.viewfs.TestViewFsConfig |
| | hadoop.fs.contract.localfs.TestLocalFSContractCreate |
| | hadoop.fs.TestListFiles |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractRename |
| | hadoop.security.TestUserGroupInformation |
| | hadoop.security.authorize.TestServiceAuthorization |
| | hadoop.fs.TestFsShellTouch |
| | hadoop.fs.TestFileUtil |
| | hadoop.fs.contract.localfs.TestLocalFSContractMultipartUploader |
| | hadoop.security.TestDoAsEffectiveUser |
| | hadoop.fs.TestFcLocalFsPermission |
| | hadoop.util.TestNodeHealthScriptRunner |
| | hadoop.io.file.tfile.TestTFileNoneCodecsJClassComparatorByteArrays |
| | hadoop.ha.TestZKFailoverControllerStress |
| | hadoop.fs.viewfs.TestViewFileSystemWithAuthorityLocalFileSystem |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractCreate |
| | hadoop.fs.viewfs.TestChRootedFileSystem |
| | hadoop.fs.TestFileContext |
| | hadoop.ipc.TestReuseRpcConnections |
| | hadoop.security.token.delegation.web.TestWebDelegationToken |
| | hadoop.fs.viewfs.TestViewFsLocalFs |
| | hadoop.util.TestJsonSerialization |
| | hadoop.security.TestProxyUserFromEnv |
| | hadoop.fs.TestLocalFileSystem |
| | hadoop.io.TestSequenceFileSerialization |
| | hadoop.fs.contract.rawlocal.TestRawlocalContractGetFileStatus |
| | hadoop.io.TestArrayFile |
| | hadoop.conf.TestConfiguration |
| | hadoop.fs.shell.TestAclCommands |
| | hadoop.fs.TestFilterFs |
| | hadoop.ipc.TestProtoBufRpcServerHandoff |
| | hadoop.security.TestSecurityUtil |
| | hadoop.fs.TestFsShellList |
| | hadoop.fs.TestFileContextDeleteOnExit |
| | hadoop.security.TestUGILoginFromKeytab |
| | hadoop.io.file.tfile.TestTFileSeqFileComparison |
| | hadoop.io.compress.TestCodec |
| | hadoop.log.TestLogLevel |
| | hadoop.security.TestLdapGroupsMapping |
| | hadoop.fs.TestSymlinkLocalFSFileSystem |
| | hadoop.ipc.TestServer |
| | hadoop.ipc.TestRpcServerHandoff |
\\
\\
|| Subsystem || Report/Notes ||
| Docker | Client=17.05.0-ce Server=17.05.0-ce Image:yetus/hadoop:8f97d6f |
| JIRA Issue | HADOOP-15996 |
| JIRA Patch URL |
https://issues.apache.org/jira/secure/attachment/12953321/HADOOP-15996.0008.patch
|
| Optional Tests | dupname asflicense compile javac javadoc mvninstall
mvnsite unit shadedclient findbugs checkstyle xml |
| uname | Linux 38896ee2249f 4.4.0-138-generic #164~14.04.1-Ubuntu SMP Fri Oct
5 08:56:16 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux |
| Build tool | maven |
| Personality | /testptch/patchprocess/precommit/personality/provided.sh |
| git revision | trunk / e9a005d |
| maven | version: Apache Maven 3.3.9 |
| Default Java | 1.8.0_191 |
| findbugs | v3.1.0-RC1 |
| checkstyle |
https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/artifact/out/diff-checkstyle-hadoop-common-project.txt
|
| unit |
https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/artifact/out/patch-unit-hadoop-common-project_hadoop-auth.txt
|
| unit |
https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/artifact/out/patch-unit-hadoop-common-project_hadoop-common.txt
|
| Test Results |
https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/testReport/ |
| Max. process+thread count | 1585 (vs. ulimit of 10000) |
| modules | C: hadoop-common-project/hadoop-auth
hadoop-common-project/hadoop-common U: hadoop-common-project |
| Console output |
https://builds.apache.org/job/PreCommit-HADOOP-Build/15710/console |
| Powered by | Apache Yetus 0.8.0 http://yetus.apache.org |
This message was automatically generated.
> Plugin interface to support more complex usernames in Hadoop
> ------------------------------------------------------------
>
> Key: HADOOP-15996
> URL: https://issues.apache.org/jira/browse/HADOOP-15996
> Project: Hadoop Common
> Issue Type: New Feature
> Components: security
> Reporter: Eric Yang
> Assignee: Bolke de Bruin
> Priority: Major
> Attachments: 0001-HADOOP-15996-Make-auth-to-local-configurable.patch,
> 0001-Make-allowing-or-configurable.patch,
> 0001-Simple-trial-of-using-krb5.conf-for-auth_to_local-ru.patch,
> 0002-HADOOP-15996-Make-auth-to-local-configurable.patch,
> 0003-HADOOP-15996-Make-auth-to-local-configurable.patch,
> 0004-HADOOP-15996-Make-auth-to-local-configurable.patch,
> 0005-HADOOP-15996-Make-auth-to-local-configurable.patch,
> HADOOP-15996.0005.patch, HADOOP-15996.0006.patch, HADOOP-15996.0007.patch,
> HADOOP-15996.0008.patch
>
>
> Hadoop does not allow support of @ character in username in recent security
> mailing list vote to revert HADOOP-12751. Hadoop auth_to_local rule must
> match to authorize user to login to Hadoop cluster. This design does not
> work well in multi-realm environment where identical username between two
> realms do not map to the same user. There is also possibility that lossy
> regex can incorrectly map users. In the interest of supporting multi-realms,
> it maybe preferred to pass principal name without rewrite to uniquely
> distinguish users. This jira is to revisit if Hadoop can support full
> principal names without rewrite and provide a plugin to override Hadoop's
> default implementation of auth_to_local for multi-realm use case.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
