Marton Greber has posted comments on this change. ( http://gerrit.cloudera.org:8080/20278 )
Change subject: KUDU-3496 support spnego dedicated keytab ...................................................................... Patch Set 6: > Patch Set 6: > > @Marton Greber > > I Finally found that the reason why the webserver-test has failed on MacOS. > > It is because MacOS uses Heimdal kerberos implementation which is kind of > different from MIT kerberos implementation. > > I was able to notice that by checking test log files. In both kerberos > implementations, setting 'KRB5_TRACE' env variable as stderr(/dev/stderr) > provided me the detailed process of GSSAPI. For the case of CentOS which uses > MIT kerberos, the test log left successful negotiation process on each unit > test case. On the other hand, the test log for MacOS did not. All the TGS > Requests were sent to kdc with wrong port number except the first unit test > case. All the unit test cases use same kdc port number that is used in the > first test case so that only first test case can be passed and others can't > not. > > In my opinion, Heimdal kerberos implementation caches a port number > somewhere. I tried to find how to totally purge the cache but i couldn't. > > I think we need a work-around that skips some tests on MacOS like what > negotiation-test've done > (https://github.com/apache/kudu/blob/ae7b08c006167da1ebb0c4302e5d6d7aa739a862/src/kudu/rpc/negotiation-test.cc#L1399-L1402) > > What do you think? Thank you very much for investigating the issue and getting to the bottom of it! In this case I think it is reasonable to use #ifndef __APPLE__ for the test. Since your explanation is longer what I would except in source code comments, I think your could put your findings into a new jira ticket. Then add just the essence of the issue into the source code as comment, with the corresponding jira number, and maybe a TODO. -- To view, visit http://gerrit.cloudera.org:8080/20278 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I01646207954854d67308f99e6b71ba32c019ed6a Gerrit-Change-Number: 20278 Gerrit-PatchSet: 6 Gerrit-Owner: Halim Kim <[email protected]> Gerrit-Reviewer: Halim Kim <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Marton Greber <[email protected]> Gerrit-Reviewer: Wang Xixu <[email protected]> Gerrit-Reviewer: Zoltan Martonka <[email protected]> Gerrit-Comment-Date: Tue, 12 Dec 2023 12:51:01 +0000 Gerrit-HasComments: No
