george-zubrienko commented on issue #12363:
URL: https://github.com/apache/iceberg/issues/12363#issuecomment-2750577750
It seems iceberg can't exchange tokens with EntraID either. Using Lakekeeper
with Trino + EntraID, after 55 min pass or so:
```
2025-03-25T09:03:21.978Z WARN lakehouse_bronze-token-refresh-0
org.apache.iceberg.util.Tasks Retrying task after failure: sleepTimeMs=1744
Malformed request: unsupported_grant_type: AADSTS70003: The app requested an
unsupported grant type 'urn:ietf:params:oauth:grant-type:token-exchange'. Trace
ID: .... Correlation ID: .... Timestamp: 2025-03-25 09:03:21Z
org.apache.iceberg.exceptions.BadRequestException: Malformed request:
unsupported_grant_type: AADSTS70003: The app requested an unsupported grant
type 'urn:ietf:params:oauth:grant-type:token-exchange'. Trace ID: ....
Correlation ID: .... Timestamp: 2025-03-25 09:03:21Z
at
org.apache.iceberg.rest.ErrorHandlers$OAuthErrorHandler.accept(ErrorHandlers.java:254)
at
org.apache.iceberg.rest.ErrorHandlers$OAuthErrorHandler.accept(ErrorHandlers.java:228)
at org.apache.iceberg.rest.HTTPClient.throwFailure(HTTPClient.java:224)
at org.apache.iceberg.rest.HTTPClient.execute(HTTPClient.java:308)
at
org.apache.iceberg.rest.BaseHTTPClient.postForm(BaseHTTPClient.java:111)
at
org.apache.iceberg.rest.auth.OAuth2Util.refreshToken(OAuth2Util.java:170)
at
org.apache.iceberg.rest.auth.OAuth2Util$AuthSession.refreshExpiredToken(OAuth2Util.java:607)
at
org.apache.iceberg.rest.auth.OAuth2Util$AuthSession.refreshCurrentToken(OAuth2Util.java:589)
at
org.apache.iceberg.rest.auth.OAuth2Util$AuthSession.lambda$refresh$1(OAuth2Util.java:562)
at
org.apache.iceberg.util.Tasks$Builder.runTaskWithRetry(Tasks.java:413)
at
org.apache.iceberg.util.Tasks$Builder.runSingleThreaded(Tasks.java:219)
at org.apache.iceberg.util.Tasks$Builder.run(Tasks.java:203)
at org.apache.iceberg.util.Tasks$Builder.run(Tasks.java:196)
at
org.apache.iceberg.rest.auth.OAuth2Util$AuthSession.refresh(OAuth2Util.java:562)
at
org.apache.iceberg.rest.auth.OAuth2Util$AuthSession.lambda$scheduleTokenRefresh$2(OAuth2Util.java:645)
at
java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:572)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:317)
at
java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)
at
java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144)
at
java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642)
at java.base/java.lang.Thread.run(Thread.java:1575)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@iceberg.apache.org
For additional commands, e-mail: issues-h...@iceberg.apache.org
