[
https://issues.apache.org/jira/browse/OOZIE-1959?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14190585#comment-14190585
]
Robert Kanter commented on OOZIE-1959:
--------------------------------------
[~bowenzhangusa], I don't think it's possible to get it to work with both. I
was hoping I could have the ZK server login with both "zookeeper/localhost" and
"zookeeper/172.0.0.1" principals, but it doesn't look like it can do that. And
I don't see a way to determine the current version of ZooKeeper, which would
have let us have a simple if statement.
It's unfortunate that they changed this behavior, but given that we now have
ZooKeeper 3.4.6, I suppose we should just use the ip principal. I don't see
another alternative. It doesn't seem to be a problem at runtime because Puru
said that Yahoo hasn't run into any problems with it.
[~bowenzhangusa], [~puru], thoughts?
> TestZKUtilsWithSecurity fails
> -----------------------------
>
> Key: OOZIE-1959
> URL: https://issues.apache.org/jira/browse/OOZIE-1959
> Project: Oozie
> Issue Type: Bug
> Affects Versions: trunk, 4.1.0
> Reporter: Robert Kanter
> Assignee: Robert Kanter
> Priority: Critical
> Fix For: trunk, 4.1.0
>
> Attachments: OOZIE-1959.patch, OOZIE-1959_branch-4.1.patch
>
>
> TestZKUtilsWithSecurity fails:
> {noformat}
> -------------------------------------------------------
> T E S T S
> -------------------------------------------------------
> Picked up _JAVA_OPTIONS: -Djava.awt.headless=true
> Concurrency config is parallel='classes', perCoreThreadCount=false,
> threadCount=1, useUnlimitedThreads=false
> 2014-07-31 16:44:33.786 java[38553:da03] Unable to load realm info from
> SCDynamicStore
> Running org.apache.oozie.util.TestZKUtilsWithSecurity
> Tests run: 2, Failures: 0, Errors: 2, Skipped: 0, Time elapsed: 71.418 sec
> <<< FAILURE!
> Results :
> Tests in error:
> testCheckAndSetACLs(org.apache.oozie.util.TestZKUtilsWithSecurity): E1700:
> Issue communicating with ZooKeeper: KeeperErrorCode = AuthFailed for /services
> testNewUsingACLs(org.apache.oozie.util.TestZKUtilsWithSecurity):
> KeeperErrorCode = AuthFailed for /oozie
> Tests run: 2, Failures: 0, Errors: 2, Skipped: 0
> {noformat}
> It would also be good to get test-patch to run this (it currently does not
> because it needs to be run in a separate JVM as it changes JVM security
> settings that can't be unchanged); I think we can actually just create a new
> module for ZK Security tests (and move this test there) because each module
> uses a new JVM.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
