Tim Armstrong has uploaded this change for review. ( http://gerrit.cloudera.org:8080/15407
Change subject: IMPALA-9359: recover from corrupt kerberos ccache ...................................................................... IMPALA-9359: recover from corrupt kerberos ccache This is a clean cherry-pick of KUDU-3050. The original commit message is below. KUDU-3050: recover from corrupt kerberos ccache This handles two failure modes: * krb5_cc_start_seq_get() can fail if the kerberos credential cache gets corrupted on disk, e.g. is truncated. * the renewal can fail to find a credential in the credential cache, either if it is missing or the renewal thread hits an error while reading through credentials. Also add some additional logging and limit the max backoff time to make it easier to debug other kinds of renewal errors. The test triggers a pre-existing memory leak bug in some older Kerberos libraries. Added a suppression for leak sanitizer to ClientNegotiation::CheckGSSAPI() to suppress it. Test: Add a test that exercises the recovery logic after truncating the credential cache. The test failed before this change. Change-Id: I86567f16816d1c6729679398ce56296744cb30c9 --- M be/src/kudu/rpc/client_negotiation.cc M be/src/kudu/security/init.cc A be/src/kudu/security/kinit_context.h M be/src/kudu/security/test/mini_kdc.cc M be/src/kudu/security/test/mini_kdc.h 5 files changed, 161 insertions(+), 62 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/07/15407/1 -- To view, visit http://gerrit.cloudera.org:8080/15407 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I86567f16816d1c6729679398ce56296744cb30c9 Gerrit-Change-Number: 15407 Gerrit-PatchSet: 1 Gerrit-Owner: Tim Armstrong <[email protected]>
