[
https://issues.apache.org/jira/browse/KUDU-3081?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17074109#comment-17074109
]
ASF subversion and git services commented on KUDU-3081:
-------------------------------------------------------
Commit 897eb377ce91a19614626ac177f4315c5c5dac69 in kudu's branch
refs/heads/master from Attila Bukor
[ https://gitbox.apache.org/repos/asf?p=kudu.git;h=897eb37 ]
KUDU-3081 Add Kerberos support to MiniRanger
As integration tests using Sentry authz provider all depend on a
Kerberized mini cluster we also need to add Kerberos support to
MiniRanger to be able to parameterize the integration tests.
As adding Kerberos support proved to be trickier than expected this
patch contains several other improvements needed for this to work.
After configuring Kerberos for both MiniRanger and the Ranger subprocess
correctly I still ran into an error:
GSSException: No valid credentials provided (Mechanism level: Failed to find
any Kerberos credentails)
This turned out to be due to a mismatch in forward and reverse lookup of
MiniRanger's hostname. To fix this I switched to using IP addresses in
the configuration instead of FQDNs.
This patch also changes the default "java" binary in Ranger client to be
the one in $JAVA_HOME/bin instead of the one in $PATH as dist-test has
mismatching versions and it wouldn't start otherwise. To use the one in
$PATH a user can still simply set it to "java", or provide a full path.
Change-Id: I32118780ad912791fe5e371004345428b6459549
Reviewed-on: http://gerrit.cloudera.org:8080/15601
Tested-by: Kudu Jenkins
Reviewed-by: Adar Dembo <[email protected]>
> Add Kerberos support to MiniRanger
> ----------------------------------
>
> Key: KUDU-3081
> URL: https://issues.apache.org/jira/browse/KUDU-3081
> Project: Kudu
> Issue Type: Sub-task
> Reporter: Attila Bukor
> Assignee: Attila Bukor
> Priority: Major
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
