Grant Henke has uploaded this change for review. (
http://gerrit.cloudera.org:8080/17498
Change subject: [txns] Allow the TxnSystemClient to run in Authorized
environments
......................................................................
[txns] Allow the TxnSystemClient to run in Authorized environments
When writing a test that runs the TxnSystemClient in an authorized
environment I saw issues where the TxnSystemClient could not
be initialized due to being unauthorized. It turns out that there
are many remote methods that the service user is not authorized
to call. This patch fixes the issue by updating the various required
calls to also allow the service user. I also enhanced a test to leverage
transactions in security-itest.cc
Here is a sample error I saw before this change:
W0524 08:57:12.618356 216932352 server_base.cc:694] Unauthorized access attempt
to method kudu.master.MasterService.ConnectToMaster from {username='kudu',
principal='kudu/[email protected]'} at 127.0.0.1:51639
W0524 08:57:12.618837 94556160 txn_system_client.cc:478] unable to initialize
TxnSystemClient, will retry in 1.000s: Remote error: Could not connect to the
cluster: Not authorized: unauthorized access to method: ConnectToMaster
Change-Id: I4622586fc27b5b67005bf023e4fbaebaf5454ad0
Reviewed-on: http://gerrit.cloudera.org:8080/17490
Tested-by: Alexey Serbin <[email protected]>
Reviewed-by: Grant Henke <[email protected]>
(cherry picked from commit 35de43051b65c8eab0f348bfd7c8a0d6e49c8067)
---
M src/kudu/client/client-test.cc
M src/kudu/integration-tests/security-itest.cc
M src/kudu/integration-tests/txn_status_table-itest.cc
M src/kudu/master/master.proto
4 files changed, 64 insertions(+), 20 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/98/17498/1
--
To view, visit http://gerrit.cloudera.org:8080/17498
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: branch-1.15.x
Gerrit-MessageType: newchange
Gerrit-Change-Id: I4622586fc27b5b67005bf023e4fbaebaf5454ad0
Gerrit-Change-Number: 17498
Gerrit-PatchSet: 1
Gerrit-Owner: Grant Henke <[email protected]>
