gaborgsomogyi commented on issue #27877: [WIP][SPARK-30541] Implement KafkaDelegationTokenSuite with testRetry URL: https://github.com/apache/spark/pull/27877#issuecomment-597554402 After local testing I've seen an interesting phenomenon. The first round of test executed properly and then the hardcoded `IllegalArgumentException` fired. Then `KDC` and Zookeeper server started properly but when `KafkaZkClient` must authenticate Kerberos is not doing a brand new authentication but found the `TGT` from the previous run (which is generated by the previous `KDC` and won't be accepted by the new): ``` Found ticket for zookeeper/[email protected] to go to krbtgt/[email protected] expiring on Thu Mar 12 02:53:17 PDT 2020 Found ticket for zkclient/[email protected] to go to krbtgt/[email protected] expiring on Thu Mar 12 02:53:02 PDT 2020 ``` See the 15 seconds timegap between the 2, `zookeeper` `TGT` just created but `zkclient` found in the JVM's shared state. Honestly not sure why only `zkclient` `TGT` found?! At the moment no idea how to reset this shared state and analysing the JVM source code. If somebody has idea then feel free to shed some lights...
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
