Gergely Farkas has posted comments on this change. ( http://gerrit.cloudera.org:8080/20691 )
Change subject: IMPALA-12552: Fix Kerberos authentication issue that occurs in python 3 environment when kerberos_host_fqdn option is used ...................................................................... Patch Set 3: (2 comments) http://gerrit.cloudera.org:8080/#/c/20691/3/fe/src/test/java/org/apache/impala/customcluster/LdapKerberosImpalaShellTest.java File fe/src/test/java/org/apache/impala/customcluster/LdapKerberosImpalaShellTest.java: http://gerrit.cloudera.org:8080/#/c/20691/3/fe/src/test/java/org/apache/impala/customcluster/LdapKerberosImpalaShellTest.java@80 PS3, Line 80: /* shouldSucceed */ true, null); > Could avoid changing all these with a wrapper function signature. Sure, I'll update that. http://gerrit.cloudera.org:8080/#/c/20691/3/fe/src/test/java/org/apache/impala/customcluster/LdapKerberosImpalaShellTest.java@607 PS3, Line 607: testShellKerberosAuthWithUser( kerberosKdcEnvironment, "user", > Failed with: Server impala/[email protected] not found in Kerberos da Yes, it works fine in my local development environment. It should use the "impala/[email protected]" service principal, but there is a reverse dns check - probably in the kerberos layer under the python - and it wants to use the "impala/[email protected]" service principal because of that, and it can't get the Kerberos ticket from them the KDC because the principal does not exist. (Even if such a principal existed, the Kerbros auth testcase would not succeed, because the impala daemon was not started with this service principal.) I'm checking it, but I don't know if it can be fixed somehow. -- To view, visit http://gerrit.cloudera.org:8080/20691 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I8b157d76824ad67faf531a529256a8afe2ab9d49 Gerrit-Change-Number: 20691 Gerrit-PatchSet: 3 Gerrit-Owner: Gergely Farkas <[email protected]> Gerrit-Reviewer: Gergely Farkas <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Michael Smith <[email protected]> Gerrit-Comment-Date: Tue, 14 Nov 2023 16:50:52 +0000 Gerrit-HasComments: Yes
