I’ll admit to being stumped. Looking for input from others…
> On May 29, 2015, at 9:46 AM, Yohan Bismuth <[email protected]> wrote:
>
> I just recompiled slider after i replaced the call to isFromKeytab()
> in validateLoginUser by isLoginKeytabBased(). Then i redeployed it on my
> gateway and launched my application.
> The error is the same as before.
>
> On Fri, May 29, 2015 at 3:36 PM, Jon Maron <[email protected]> wrote:
>
>> Please describe the full procedure you used to retest.
>>
>>> On May 29, 2015, at 9:28 AM, Yohan Bismuth <[email protected]>
>> wrote:
>>>
>>> ...but i got the same problem using this method instead
>>>
>>> On Fri, May 29, 2015 at 3:25 PM, Yohan Bismuth <[email protected]
>>>
>>> wrote:
>>>
>>>> oops my bad, was not looking the good thing
>>>>
>>>> On Fri, May 29, 2015 at 3:13 PM, Jon Maron <[email protected]>
>> wrote:
>>>>
>>>>> It’s declared as public static:
>>>>>
>>>>> public synchronized static boolean isLoginKeytabBased()
>>>>>
>>>>> at least the version I’m looking at
>>>>>
>>>>>> On May 29, 2015, at 8:52 AM, Yohan Bismuth <[email protected]>
>>>>> wrote:
>>>>>>
>>>>>> Mmh I can't compile this. I don't think you can use
>> isLoginKeytabBased()
>>>>>> since isKeytab is private in ugi.
>>>>>>
>>>>>> On Fri, May 29, 2015 at 1:56 PM, Jon Maron <[email protected]>
>>>>> wrote:
>>>>>>
>>>>>>> Looks like you’ve found a bug: validateLoginUser should be calling
>>>>>>> isLoginKeytabBased(), not isFromKeytab(). Would mind filing a JIRA?
>>>>>>>
>>>>>>> — Jon
>>>>>>>
>>>>>>>> On May 29, 2015, at 5:24 AM, Yohan Bismuth <
>> [email protected]>
>>>>>>> wrote:
>>>>>>>>
>>>>>>>> Btw, i've tried using java7 and java8: smae issue.
>>>>>>>> I'm correctly logged as the principal of my keytab, and i can submit
>>>>> jobs
>>>>>>>> (like a wordcount) using this keytab.
>>>>>>>>
>>>>>>>> If i remove this line from the code:
>>>>>>>>
>>>>>>>>> validateLoginUser(UserGroupInformation.getLoginUser());
>>>>>>>>
>>>>>>>> everything seems to work fine.
>>>>>>>>
>>>>>>>> hasKerberosCredentials returns true, so the login must be based on a
>>>>>>>>> kerberos ticket. Perhaps it has expired?
>>>>>>>>
>>>>>>>> Well, this is the point here, i don't want the login to be based on
>> a
>>>>>>>> kerberos ticket (because it would mean the ugi has the wrong flag
>> set
>>>>> to
>>>>>>>> true). I want the login to be based on a kerberos key.
>>>>>>>>
>>>>>>>>
>>>>>>>> 2015-05-29 8:49 GMT+02:00 Jean-Baptiste Note <[email protected]>:
>>>>>>>>
>>>>>>>>> C'est pas très grave pour nous c'est packagé à la cradoc pour
>>>>> l'instant.
>>>>>>>>> C'est peut-etre aussi le fix ! Faudrait faire un git blame pour
>>>>>>> comprendre
>>>>>>>>> pourquoi l'exception est là. Elle trigge peut-etre aussi dans un
>> cas
>>>>>>>>> légitime ?
>>>>>>>>>
>>>>>>>>> Question subsidiaire: tu soumets bien le job en tant que
>>>>>>>>> [email protected] et pas [email protected] ?
>> (c'est
>>>>> la
>>>>>>>>> meme question que: tu as fait kinit en plus subtil)
>>>>>>>>> Tu as essayé avec un krb5.conf qui mette bien HPC.CRITEO.PREPROD en
>>>>>>>>> default realm sur la gateway.
>>>>>>>>>
>>>>>>>>> JB
>>>>>>>>>
>>>>>>>>> 2015-05-28 23:05 GMT+02:00 Yohan Bismuth <[email protected]
>>> :
>>>>>>>>>
>>>>>>>>>> Bah ça implique de modifier et recompiler slider. Je sais pas si
>> on
>>>>>>> veut
>>>>>>>>>> ça...
>>>>>>>>>>
>>>>>>>>>> 2015-05-28 22:20 GMT+02:00 Jean-Baptiste Note <[email protected]>:
>>>>>>>>>>
>>>>>>>>>>> OK j'ai rien dit :)
>>>>>>>>>>> Tu peux spécifier tout ça dans le thread, si vraiment ça
>> fonctionne
>>>>>>> sans
>>>>>>>>>>> l'exception, je vois même pas pourquoi on s'embête en fait ???
>>>>>>>>>>>
>>>>>>>>>>> JB
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> Jean-Baptiste Note
>>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>
>>>>>
>>>>
>>
>>
