[ 
https://issues.apache.org/jira/browse/YARN-2689?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14171545#comment-14171545
 ] 

Steve Loughran commented on YARN-2689:
--------------------------------------

login is looking for domained principal
{code}
JVM krb5.conf to: 
C:\Work\hadoop-trunk\hadoop-yarn-project\hadoop-yarn\hadoop-yarn-registry\target\kdc\1413321345247\krb5.conf
2014-10-14 14:15:53,044 [main] INFO  secure.AbstractSecureRegistryTest 
(AbstractSecureRegistryTest.java:setupKDCAndPrincipals(219)) - 
zookeeper { 
 com.sun.security.auth.module.Krb5LoginModule required
 
keyTab="C:\Work\hadoop-trunk\hadoop-yarn-project\hadoop-yarn\hadoop-yarn-registry\target\kdc\zookeeper.keytab"
 debug=true
 principal="zookeeper"
 useKeyTab=true
 useTicketCache=false
 doNotPrompt=true
 storeKey=true;
}; 
ZOOKEEPER_SERVER { 
 com.sun.security.auth.module.Krb5LoginModule required
 
keyTab="C:\Work\hadoop-trunk\hadoop-yarn-project\hadoop-yarn\hadoop-yarn-registry\target\kdc\zookeeper.keytab"
 debug=true
 principal="zookeeper/localhost"
 useKeyTab=true
 useTicketCache=false
 doNotPrompt=true
 storeKey=true;
}; 
alice { 
 com.sun.security.auth.module.Krb5LoginModule required
 
keyTab="C:\Work\hadoop-trunk\hadoop-yarn-project\hadoop-yarn\hadoop-yarn-registry\target\kdc\alice.keytab"
 debug=true
 principal="alice/localhost"
 useKeyTab=true
 useTicketCache=false
 doNotPrompt=true
 storeKey=true;
}; 
bob { 
 com.sun.security.auth.module.Krb5LoginModule required
 
keyTab="C:\Work\hadoop-trunk\hadoop-yarn-project\hadoop-yarn\hadoop-yarn-registry\target\kdc\bob.keytab"
 debug=true
 principal="bob/localhost"
 useKeyTab=true
 useTicketCache=false
 doNotPrompt=true
 storeKey=true;
}; 

Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt 
true ticketCache is null isInitiator true KeyTab is 
C:Workhadoop-trunkhadoop-yarn-projecthadoop-yarnhadoop-yarn-registry   
argetkdczookeeper.keytab refreshKrb5Config is false principal is 
zookeeper/localhost tryFirstPass is false useFirstPass is false storePass is 
false clearPass is false
Key for the principal zookeeper/localh...@example.com not available in 
C:Workhadoop-trunkhadoop-yarn-projecthadoop-yarnhadoop-yarn-registry     
argetkdczookeeper.keytab
                [Krb5LoginModule] authentication failed 
Unable to obtain password from user
{code}

> TestSecureRMRegistryOperations failing on windows
> -------------------------------------------------
>
>                 Key: YARN-2689
>                 URL: https://issues.apache.org/jira/browse/YARN-2689
>             Project: Hadoop YARN
>          Issue Type: Sub-task
>          Components: api, resourcemanager
>    Affects Versions: 2.6.0
>         Environment: Windows server, Java 7, ZK 3.4.6
>            Reporter: Steve Loughran
>            Assignee: Steve Loughran
>
> the micro ZK service used in the {{TestSecureRMRegistryOperations}} test 
> doesnt start on windows, 
> {code}
> org.apache.hadoop.service.ServiceStateException: java.io.IOException: Could 
> not configure server because SASL configuration did not allow the  ZooKeeper 
> server to authenticate itself properly: 
> javax.security.auth.login.LoginException: Unable to obtain password from user
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to