[ https://issues.apache.org/jira/browse/HADOOP-10982?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14139616#comment-14139616 ]
Alejandro Abdelnur commented on HADOOP-10982: --------------------------------------------- OK, testpatch is gaga, the KMS tests do not fail (from the console): {code} Running org.apache.hadoop.crypto.key.kms.server.TestKMSACLs Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.503 sec - in org.apache.hadoop.crypto.key.kms.server.TestKMSACLs Running org.apache.hadoop.crypto.key.kms.server.TestKMSWithZK Running org.apache.hadoop.crypto.key.kms.server.TestKeyAuthorizationKeyProvider Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.129 sec - in org.apache.hadoop.crypto.key.kms.server.TestKeyAuthorizationKeyProvider Running org.apache.hadoop.crypto.key.kms.server.TestKMS Tests run: 12, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 20.122 sec - in org.apache.hadoop.crypto.key.kms.server.TestKMS Running org.apache.hadoop.crypto.key.kms.server.TestKMSAudit Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 6.489 sec - in org.apache.hadoop.crypto.key.kms.server.TestKMSAudit {code} The failing test is {code} Failed tests: TestMetricsSystemImpl.testMultiThreadedPublish:235 Metric not collected! {code} I'll commit this JIRA momentarily and create one for the testcase part. > KMS: Support for multiple Kerberos principals > --------------------------------------------- > > Key: HADOOP-10982 > URL: https://issues.apache.org/jira/browse/HADOOP-10982 > Project: Hadoop Common > Issue Type: Improvement > Affects Versions: 3.0.0 > Reporter: Andrew Wang > Assignee: Alejandro Abdelnur > Attachments: HADOOP-10982.patch, HADOOP-10982.patch, > HADOOP-10982.patch, HADOOP-10982.patch > > > The Key Management Server should support multiple Kerberos principals. > This is required for KMS multi instance setups behind a VIP. In such > scenarios there must a principal with the VIP hostname and one with the > actual hostname of the KMS instance. Regular users will use the VIP entry > point, monitoring agents must hit a specific instance. -- This message was sent by Atlassian JIRA (v6.3.4#6332)