Attila Bukor has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/23052 )
Change subject: SPNEGO authentication in ExternalMiniCluster ...................................................................... SPNEGO authentication in ExternalMiniCluster This commit edits the CreateKerberosConfig method to make calls to the webserver work with SPNEGO authentication in the ExternalMiniCluster. The changes include: 1. Creating a single keytab file that contains both the RPC service principal (kudu/host) and the HTTP service principal (HTTP/host). 2. Enabling SPNEGO authentication for the web UI by adding the appropriate flag (--webserver_require_spnego). This change is necessary to properly test REST API authentication in master_authz-itests.cc, as HTTP requests require SPNEGO to be configured correctly to authenticate through Kerberos. Some modifications, like setting authentication type to SPNEGO when using EasyCurl in kerberized environments, had to be done in tests in order for them to work as expected. Change-Id: Ib6035bdf7f2f0f08f53485a7a1aa82ed26148cc4 Reviewed-on: http://gerrit.cloudera.org:8080/23052 Tested-by: Kudu Jenkins Reviewed-by: Attila Bukor <[email protected]> Reviewed-by: Marton Greber <[email protected]> Reviewed-by: Zoltan Chovan <[email protected]> --- M java/kudu-test-utils/src/main/java/org/apache/kudu/test/cluster/MiniKuduCluster.java M src/kudu/integration-tests/cluster_itest_util.cc M src/kudu/integration-tests/cluster_itest_util.h M src/kudu/integration-tests/security-itest.cc M src/kudu/master/dynamic_multi_master-test.cc M src/kudu/mini-cluster/external_mini_cluster-test.cc M src/kudu/mini-cluster/external_mini_cluster.cc M src/kudu/mini-cluster/external_mini_cluster.h 8 files changed, 93 insertions(+), 10 deletions(-) Approvals: Kudu Jenkins: Verified Attila Bukor: Looks good to me, approved Marton Greber: Looks good to me, but someone else must approve Zoltan Chovan: Looks good to me, but someone else must approve -- To view, visit http://gerrit.cloudera.org:8080/23052 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: Ib6035bdf7f2f0f08f53485a7a1aa82ed26148cc4 Gerrit-Change-Number: 23052 Gerrit-PatchSet: 7 Gerrit-Owner: Gabriella Lotz <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Gabriella Lotz <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Marton Greber <[email protected]> Gerrit-Reviewer: Zoltan Chovan <[email protected]>
