Andrew Wong has posted comments on this change. ( http://gerrit.cloudera.org:8080/15414 )
Change subject: [java] fix Kudu Ranger plugin when Ranger is Kerberized ...................................................................... Patch Set 6: (2 comments) http://gerrit.cloudera.org:8080/#/c/15414/5//COMMIT_MSG Commit Message: http://gerrit.cloudera.org:8080/#/c/15414/5//COMMIT_MSG@22 PS5, Line 22: even after running for longer > The ticket lifetime. Can you check with the renewal lifetime and ensure that the Ranger plugin will indeed be able to log in with the keytab? From the SO post: "After the renewable lifetime is exhausted, or if one doesn't renew the ticket before the ticket lifetime expires, you have to re-enter credentials or use the key from a keytab." http://gerrit.cloudera.org:8080/#/c/15414/4/java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/authorization/RangerKuduAuthorizer.java File java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/authorization/RangerKuduAuthorizer.java: http://gerrit.cloudera.org:8080/#/c/15414/4/java/kudu-subprocess/src/main/java/org/apache/kudu/subprocess/ranger/authorization/RangerKuduAuthorizer.java@78 PS4, Line 78: if (servicePrincipal.isEmpty() || keytab.isEmpty()) { : throw new KuduSubprocessException("Kudu > Right, that is the reason I had Preconditions in the previous versions whic Maybe I'm misreading the comments there, but it seems like the suggestion was to allow servicePrincipal and keytab to be null (i.e. have the nulls be the default if -i and -k aren't passed), in which case we could have moved the preconditions into the UGI.isSecurityEnabled() block. -- To view, visit http://gerrit.cloudera.org:8080/15414 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: Ibe043293ea9cc1c2f43a331603dc1e3b36ff6ae0 Gerrit-Change-Number: 15414 Gerrit-PatchSet: 6 Gerrit-Owner: Hao Hao <[email protected]> Gerrit-Reviewer: Adar Dembo <[email protected]> Gerrit-Reviewer: Andrew Wong <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Grant Henke <[email protected]> Gerrit-Reviewer: Hao Hao <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Comment-Date: Tue, 17 Mar 2020 02:05:06 +0000 Gerrit-HasComments: Yes
