[
https://issues.apache.org/jira/browse/HADOOP-16031?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16860275#comment-16860275
]
Eric Yang commented on HADOOP-16031:
------------------------------------
[~Jim_Brennan] This patch does not apply to branch-2 because:
1. When TestSecureLogins was merged, HADOOP-12751 was in branch-2.
2. acl_to_local act as a firewall rule again after HADOOP-15959 reverted
HADOOP-12751.
3. acl_to_local pass through is only allowed in Hadoop 3.1.2+ by HADOOP-15996
(new feature).
The test case does not have a way to work in branch-2 latest anymore because
lack of ability to allow non-matching auth_to_local rule to pass through. It
would be best to open a separate issue to address the gap because the branch-2
KerberosName#getShortName() lacks the ability to handle complex non-kerberos
name (zookeeper/localhost).
> TestSecureLogins#testValidKerberosName fails
> --------------------------------------------
>
> Key: HADOOP-16031
> URL: https://issues.apache.org/jira/browse/HADOOP-16031
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Reporter: Akira Ajisaka
> Assignee: Akira Ajisaka
> Priority: Major
> Fix For: 3.2.0, 3.3.0, 3.1.3
>
> Attachments: HADOOP-16031.01.patch
>
>
> {noformat}
> [INFO] Running org.apache.hadoop.registry.secure.TestSecureLogins
> [ERROR] Tests run: 11, Failures: 0, Errors: 1, Skipped: 0, Time elapsed:
> 2.724 s <<< FAILURE! - in org.apache.hadoop.registry.secure.TestSecureLogins
> [ERROR]
> testValidKerberosName(org.apache.hadoop.registry.secure.TestSecureLogins)
> Time elapsed: 0.01 s <<< ERROR!
> org.apache.hadoop.security.authentication.util.KerberosName$NoMatchingRule:
> No rules applied to zookeeper/localhost
> at
> org.apache.hadoop.security.authentication.util.KerberosName.getShortName(KerberosName.java:429)
> at
> org.apache.hadoop.registry.secure.TestSecureLogins.testValidKerberosName(TestSecureLogins.java:203)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.lang.reflect.Method.invoke(Method.java:498)
> {noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
