Alex Rudyy created QPID-8426:
--------------------------------
Summary: [Broker-J][Tests] Kerberos integration tests can
sporadically fail in some environments
Key: QPID-8426
URL: https://issues.apache.org/jira/browse/QPID-8426
Project: Qpid
Issue Type: Bug
Components: Java Tests
Affects Versions: qpid-java-broker-7.1.8, qpid-java-broker-7.1.7,
qpid-java-broker-7.1.6, qpid-java-broker-7.1.5, qpid-java-broker-8.0.0
Reporter: Alex Rudyy
Integration tests from test suites {{KerberosAuthenticationManagerTest}} and
{{SpnegoAuthenticatorTest}} can fail as below
{noformat}
[ERROR] Tests run: 4, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 0.277 s
<<< FAILURE! - in
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest
[ERROR]
testCreateSaslNegotiator(org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest)
Time elapsed: 0.095 s <<< ERROR!
java.security.PrivilegedActionException
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
Caused by: javax.security.sasl.SaslException: GSS initiate failed
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
Caused by: org.ietf.jgss.GSSException: No valid credentials provided (Mechanism
level: Server not found in Kerberos database (7) - Server not found in Kerberos
database)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
Caused by: sun.security.krb5.KrbException: Server not found in Kerberos
database (7) - Server not found in Kerberos database
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
Caused by: sun.security.krb5.Asn1Exception: Identifier doesn't match expected
value (906)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
at
org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137
{noformat}
The Apache kerby embedded kerberos server {{SimpleKdcServer}} is used in the
failing tests. What is interesting that kerberos integration tests where
ApacheDS Kerberos Server is used have never been seen failing sporadically (See
{{SimpleLDAPAuthenticationManagerTest}}). Potentially, a switch from Kerby to
ApacheDS Kerberos Server should solve the issue. Though, the original Kerby
sources have been extracted from ApacheDS Kerberos Server implementation. The
failures could be caused by configuration issue.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
