Halim Kim has posted comments on this change. ( 
http://gerrit.cloudera.org:8080/20278 )

Change subject: KUDU-3496 support spnego dedicated keytab
......................................................................


Patch Set 6:

@Marton Greber

I Finally found that the reason why the webserver-test has failed on MacOS.

It is because MacOS uses Heimdal kerberos implementation which is kind of 
different from MIT kerberos implementation.

I was able to notice that by checking test log files. In both kerberos 
implementations, setting 'KRB5_TRACE' env variable as stderr(/dev/stderr) 
provided me the detailed process of GSSAPI. For the case of CentOS which uses 
MIT kerberos, the test log left successful negotiation process on each unit 
test case. On the other hand, the test log for MacOS did not. All the TGS 
Requests were sent to kdc with wrong port number except the first unit test 
case. All the unit test cases use same kdc port number that is used in the 
first test case so that only first test case can be passed and others can't not.

In my opinion, Heimdal kerberos implementation caches a port number somewhere. 
I tried to find how to totally purge the cache but i couldn't.

I think we need a work-around that skips some tests on MacOS like what 
negotiation-test've done 
(https://github.com/apache/kudu/blob/ae7b08c006167da1ebb0c4302e5d6d7aa739a862/src/kudu/rpc/negotiation-test.cc#L1399-L1402)

What do you think?


--
To view, visit http://gerrit.cloudera.org:8080/20278
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: comment
Gerrit-Change-Id: I01646207954854d67308f99e6b71ba32c019ed6a
Gerrit-Change-Number: 20278
Gerrit-PatchSet: 6
Gerrit-Owner: Halim Kim <[email protected]>
Gerrit-Reviewer: Halim Kim <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
Gerrit-Reviewer: Marton Greber <[email protected]>
Gerrit-Reviewer: Wang Xixu <[email protected]>
Gerrit-Reviewer: Zoltan Martonka <[email protected]>
Gerrit-Comment-Date: Mon, 11 Dec 2023 06:44:21 +0000
Gerrit-HasComments: No

Reply via email to