I'm currently looking at the KerberosRenewalIT failures that seem to be persisting across branches. From the logs, it looks like the accumulo services are trying to do ticket-cache based login renewals, instead of keytab-based renewals. This has been a problematic test for me before, and as such, I've gotten into the habit of ignoring it, but since I've not been able to get it to work on reruns, and it fails nearly 100% of the time (if not 100%) for me now, I decided to take a closer look. If it is doing ticket-cache based renewals, that could indicate a bug in the Kerberos authentication, and that would probably warrant a -1 from me... but I will continue to investigate first.
Josh, you know more about the Kerberos stuff than anyone here, so if you have time/interest, I wouldn't mind getting your feedback on why this test might be failing for me. On Mon, Mar 19, 2018 at 3:44 PM Christopher <ctubb...@apache.org> wrote: > Accumulo Developers, > > Please consider the following candidate for Accumulo 1.7.4. > > Git Commit: > b2a59189108d736729432e81b3d5717000c6b891 > Branch: > 1.7.4-rc1 > > If this vote passes, a gpg-signed tag will be created using: > git tag -f -m 'Apache Accumulo 1.7.4' -s rel/1.7.4 \ > b2a59189108d736729432e81b3d5717000c6b891 > > Staging repo: > https://repository.apache.org/content/repositories/orgapacheaccumulo-1068 > Source (official release artifact): > https://repository.apache.org/content/repositories/orgapacheaccumulo-1068/org/apache/accumulo/accumulo/1.7.4/accumulo-1.7.4-src.tar.gz > Binary: > https://repository.apache.org/content/repositories/orgapacheaccumulo-1068/org/apache/accumulo/accumulo/1.7.4/accumulo-1.7.4-bin.tar.gz > (Append ".sha1", ".md5", or ".asc" to download the signature/hash for a > given artifact.) > > All artifacts were built and staged with: > mvn release:prepare && mvn release:perform > > Signing keys are available at https://www.apache.org/dist/accumulo/KEYS > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D) > > Release notes (in progress) can be found at: > https://accumulo.apache.org/release/accumulo-1.7.4/ > > Please vote one of: > [ ] +1 - I have verified and accept... > [ ] +0 - I have reservations, but not strong enough to vote against... > [ ] -1 - Because..., I do not accept... > ... these artifacts as the 1.7.4 release of Apache Accumulo. > > This vote will remain open until at least Thu Mar 22 20:00:00 UTC 2018 > (Thu Mar 22 16:00:00 EDT 2018 / Thu Mar 22 13:00:00 PDT 2018). > Voting continues until the release manager sends an email closing the vote. > > Thanks! > > P.S. Hint: download the whole staging repo with > wget -erobots=off -r -l inf -np -nH \ > > https://repository.apache.org/content/repositories/orgapacheaccumulo-1068/ > # note the trailing slash is needed > >
