Dan Burkert has submitted this change and it was merged. Change subject: Misc. fixes for Kerberos compatibility on OS X ......................................................................
Misc. fixes for Kerberos compatibility on OS X This commit makes a few changes in order to have better compatibility with the system macOS Heimdal kerberos: 1. krb5kdc now uses UDP instead of TCP; the heimdal client library seems to have issues connecting via TCP. 2. The ticket cache is now the default FILE type instead of DIR. This has the downside of limiting our MiniKdc to one kinitted user, but heimdal apparently has issues with DIR, and FILE is expected to be how normal users will use Kerberos. 3. The SASL error string handling is special cased for the Heimdal errors on OS X. sasl_rpc-test is still failing on macOS, but these changes get us a bit closer to having it pass. Change-Id: I3b61af8cedf83745a5b7a6b806b68912f2655821 Reviewed-on: http://gerrit.cloudera.org:8080/4978 Reviewed-by: Adar Dembo <[email protected]> Tested-by: Kudu Jenkins --- M src/kudu/rpc/sasl_common.cc M src/kudu/rpc/sasl_rpc-test.cc M src/kudu/security/test/mini_kdc-test.cc M src/kudu/security/test/mini_kdc.cc M src/kudu/util/test_util.cc M src/kudu/util/test_util.h 6 files changed, 35 insertions(+), 21 deletions(-) Approvals: Adar Dembo: Looks good to me, approved Kudu Jenkins: Verified -- To view, visit http://gerrit.cloudera.org:8080/4978 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: merged Gerrit-Change-Id: I3b61af8cedf83745a5b7a6b806b68912f2655821 Gerrit-PatchSet: 4 Gerrit-Project: kudu Gerrit-Branch: master Gerrit-Owner: Dan Burkert <[email protected]> Gerrit-Reviewer: Adar Dembo <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Dan Burkert <[email protected]> Gerrit-Reviewer: Kudu Jenkins Gerrit-Reviewer: Todd Lipcon <[email protected]>
