[
https://issues.apache.org/jira/browse/HDDS-8718?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ivan Zlenko updated HDDS-8718:
------------------------------
Description:
In current implementation of GrpcOmTransport we do not passing information
about Kerberos token between client and server. That's lead to broken GetSecret
and RevokeSecret commands if we are switching to GrpcOmTransport.
Right now ozone cli forced to use Hadoop3OmTransport so issues do not manifests
itself at the moment. But implementation of HDDS-8050 currently blocked by this
bug.
To reproduce it one can simply need to change
{code:java}
org.apache.hadoop.ozone.om.protocolPB.Hadoop3OmTransportFactory{code}
to
{code:java}
org.apache.hadoop.ozone.om.protocolPB.GrpcOmTransport{code}
in
{code:java}
hadoop-ozone/tools/src/main/resources/META-INF/services/org.apache.hadoop.ozone.om.protocolPB.OmTransportFactory{code}
. And execute following commands:
{code:java}
ozone s3 getsecret
ozone s3 revokesecret
{code}
was:
In current implementation of GrpcOmTransport we do not passing information
about Kerberos token between client and server. That's lead to broken GetSecret
and RevokeSecret commands if we are switching to GrpcOmTransport.
Right now ozone cli forced to use Hadoop3OmTransport so issues do not manifests
itself at the moment. But implementation of HDDS-8050 currently blocked by this
bug.
To reproduce it one can simply need to change
{code:java}
org.apache.hadoop.ozone.om.protocolPB.Hadoop3OmTransportFactory{code}
to
{code:java}
org.apache.hadoop.ozone.om.protocolPB.GrpcOmTransport{code}
in
{code:java}
hadoop-ozone/tools/src/main/resources/META-INF/services/org.apache.hadoop.ozone.om.protocolPB.OmTransportFactory{code}
. And execute following commands:
{code:java}
ozone s3 getsecret
ozone s3 revokesecret
{code}
> Kerberos authentication not working for GrpcOmTransport
> --------------------------------------------------------
>
> Key: HDDS-8718
> URL: https://issues.apache.org/jira/browse/HDDS-8718
> Project: Apache Ozone
> Issue Type: Bug
> Components: OM, S3
> Affects Versions: 1.4.0
> Reporter: Ivan Zlenko
> Priority: Critical
>
> In current implementation of GrpcOmTransport we do not passing information
> about Kerberos token between client and server. That's lead to broken
> GetSecret and RevokeSecret commands if we are switching to GrpcOmTransport.
> Right now ozone cli forced to use Hadoop3OmTransport so issues do not
> manifests itself at the moment. But implementation of HDDS-8050 currently
> blocked by this bug.
> To reproduce it one can simply need to change
> {code:java}
> org.apache.hadoop.ozone.om.protocolPB.Hadoop3OmTransportFactory{code}
> to
> {code:java}
> org.apache.hadoop.ozone.om.protocolPB.GrpcOmTransport{code}
> in
> {code:java}
> hadoop-ozone/tools/src/main/resources/META-INF/services/org.apache.hadoop.ozone.om.protocolPB.OmTransportFactory{code}
> . And execute following commands:
> {code:java}
> ozone s3 getsecret
> ozone s3 revokesecret
> {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
