[ 
https://issues.apache.org/jira/browse/HADOOP-9848?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13735205#comment-13735205
 ] 

Alejandro Abdelnur commented on HADOOP-9848:
--------------------------------------------

[~daryn], I was helping Wei getting started with this patch, I don't think 
there is a way to start the kdc without the ldap server backing it. Regarding 
the creation of the schema, I know Wei tried a few different ways of doing this 
with the goal of making things completely transparent to the users, other 
approaches required using a bunch of annotations before starting the kdc and 
that was not pretty. The generated files after this schema initialization are 
~1400 files in the working directory, so I'd say that these extra 70lines do 
create the schema are far better than checking in ~1400 ldiff files (which I 
don't know how they could be parameterized). The MiniKdc trashes its private 
working dir on shutdown not to leave those files around.

About having a {{KerberosSecurityTestcase}}, that sounds like a good Idea. Wei, 
mind doing that? It should be under main/source/java, and you'll have to make 
junit a compile dependency.

                
> Create a MiniKDC for use with security testing
> ----------------------------------------------
>
>                 Key: HADOOP-9848
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9848
>             Project: Hadoop Common
>          Issue Type: New Feature
>          Components: security, test
>            Reporter: Wei Yan
>            Assignee: Wei Yan
>         Attachments: HADOOP-9848.patch, HADOOP-9848.patch
>
>
> Create a MiniKDC using Apache Directory Server. MiniKDC builds an embedded 
> KDC (key distribution center), and allows to create principals and keytabs on 
> the fly. MiniKDC can be integrated for Hadoop security unit testing.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to