adoroszlai opened a new pull request, #6631:
URL: https://github.com/apache/ozone/pull/6631
## What changes were proposed in this pull request?
Fix:
```
Exception in thread "main" java.lang.NoClassDefFoundError:
org/apache/kerby/kerberos/kerb/keytab/Keytab
at
org.apache.hadoop.security.authentication.util.KerberosUtil.getPrincipalNames(KerberosUtil.java:238)
at
org.apache.hadoop.security.authentication.util.KerberosUtil.getPrincipalNames(KerberosUtil.java:257)
at
org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:163)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.initializeAuthHandler(AuthenticationFilter.java:194)
at
org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:180)
...
at
org.apache.hadoop.hdds.server.http.HttpServer2.start(HttpServer2.java:1184)
at
org.apache.hadoop.hdds.server.http.BaseHttpServer.start(BaseHttpServer.java:322)
```
Hadoop's `KerberosUtil` requires `kerb-util` to be on the classpath to use
`Keytab`. However, this code path is hit only in specific cases. One of these
is when HTTP principal is set to wildcard (`*`).
Similarly, `kerb-core` may be required for using `PrincipalName`.
https://issues.apache.org/jira/browse/HDDS-10803
## How was this patch tested?
The patch changes Recon's HTTP principal in `ozonesecure` acceptance test
environment to `*` to have coverage for this case.
Also verified `kerb-util` is on the classpath (logged in `STARTUP_MSG`).
CI:
https://github.com/adoroszlai/ozone/actions/runs/8943525426/job/24569000209
https://github.com/adoroszlai/ozone/actions/runs/8943794693 (with dependency
check fixed)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
