Welcome to why people say "Kerberos is hard".

I think I said in chat, but increasing the timeout factor is not going to make that test pass if it can't pass the first time. The MiniKDC the tests use are not representative of a real KDC. I'd ask that you deploy Accumulo with Kerberos before passing judgement on the feature as a whole.

I still have your IT logs -- I didn't get a chance to look at them yesterday. I'll try to do so today.

Christopher wrote:
I had a lot of difficulty getting the Kerberos ITs to pass without timing
out. I was never able to get the KerberosRenewalIT to pass, even after
re-running several times (still trying), and even with a timeout factor of
20. I do not have a strong confidence in the quality of the Kerberos
features as is, so it's not a critical feature for me, so I'll defer to
others tests for that.

Reply via email to