Yeah, I vaguely remember that now. It definitely seems to be the problem
here. I believe it is one of the reasons we moved to 2.6.4 in 1.8+
I had forgotten about that. The 1.7 branch was still building with Hadoop
2.2.0 and I now do my testing with jdk8 only, so that's why it kept being a
problem for me.
Thanks for the info. I spent way too much time this week looking into this
when all I needed to do was test with a newer version of Hadoop (or an
older version of jdk), but at least I now know what the problem was.
On Thu, Mar 22, 2018, 21:15 Billie Rinaldi <billie.rina...@gmail.com> wrote:
> On Thu, Mar 22, 2018 at 2:31 PM, Christopher <ctubb...@apache.org> wrote:
>
> > Josh, I know you said you didn't have much time, but just in case you
> get a
> > moment: do you know why `UserGroupInformation.isLoginKeytabBased()` might
> > be false on the server side? This seems to be the root cause of the
> > problems.
> >
>
> I recall running into HADOOP-10786 a while ago ("in java 8 isKeyTab is
> always false given the current UGI implementation"). Not sure if that would
> be relevant here.
>
>
> >
> > https://github.com/apache/accumulo/blob/b0016c3ca36e15ee4bdde727ea5b6a
> > 18597de0ff/core/src/main/java/org/apache/accumulo/core/rpc/
> > ThriftUtil.java#L383
> >
> >
> > On Thu, Mar 22, 2018 at 4:00 PM Josh Elser <els...@apache.org> wrote:
> >
> > > I don't have the time to look at these right now. There isn't much
> > > special about how Accumulo uses Kerberos either. It's straightforward
> > > use via SASL with Thrift. I haven't looked at it since it was passing
> > > when I wrote it originally.
> > >
> > > On 3/20/18 2:32 PM, Christopher wrote:
> > > > I'm currently looking at the KerberosRenewalIT failures that seem to
> be
> > > > persisting across branches. From the logs, it looks like the accumulo
> > > > services are trying to do ticket-cache based login renewals, instead
> of
> > > > keytab-based renewals. This has been a problematic test for me
> before,
> > > > and as such, I've gotten into the habit of ignoring it, but since
> I've
> > > > not been able to get it to work on reruns, and it fails nearly 100%
> of
> > > > the time (if not 100%) for me now, I decided to take a closer look.
> If
> > > > it is doing ticket-cache based renewals, that could indicate a bug in
> > > > the Kerberos authentication, and that would probably warrant a -1
> from
> > > > me... but I will continue to investigate first.
> > > >
> > > > Josh, you know more about the Kerberos stuff than anyone here, so if
> > you
> > > > have time/interest, I wouldn't mind getting your feedback on why this
> > > > test might be failing for me.
> > > >
> > > > On Mon, Mar 19, 2018 at 3:44 PM Christopher <ctubb...@apache.org
> > > > <mailto:ctubb...@apache.org>> wrote:
> > > >
> > > > Accumulo Developers,
> > > >
> > > > Please consider the following candidate for Accumulo 1.7.4.
> > > >
> > > > Git Commit:
> > > > b2a59189108d736729432e81b3d5717000c6b891
> > > > Branch:
> > > > 1.7.4-rc1
> > > >
> > > > If this vote passes, a gpg-signed tag will be created using:
> > > > git tag -f -m 'Apache Accumulo 1.7.4' -s rel/1.7.4 \
> > > > b2a59189108d736729432e81b3d5717000c6b891
> > > >
> > > > Staging repo:
> > > >
> > > https://repository.apache.org/content/repositories/
> > orgapacheaccumulo-1068
> > > > Source (official release artifact):
> > > >
> > > https://repository.apache.org/content/repositories/
> > orgapacheaccumulo-1068/org/apache/accumulo/accumulo/1.7.
> > 4/accumulo-1.7.4-src.tar.gz
> > > > Binary:
> > > >
> > > https://repository.apache.org/content/repositories/
> > orgapacheaccumulo-1068/org/apache/accumulo/accumulo/1.7.
> > 4/accumulo-1.7.4-bin.tar.gz
> > > > (Append ".sha1", ".md5", or ".asc" to download the signature/hash
> > > > for a given artifact.)
> > > >
> > > > All artifacts were built and staged with:
> > > > mvn release:prepare && mvn release:perform
> > > >
> > > > Signing keys are available at
> > > https://www.apache.org/dist/accumulo/KEYS
> > > > (Expected fingerprint: 8CC4F8A2B29C2B040F2B835D6F0CDAE700B6899D)
> > > >
> > > > Release notes (in progress) can be found at:
> > > > https://accumulo.apache.org/release/accumulo-1.7.4/
> > > >
> > > > Please vote one of:
> > > > [ ] +1 - I have verified and accept...
> > > > [ ] +0 - I have reservations, but not strong enough to vote
> > > against...
> > > > [ ] -1 - Because..., I do not accept...
> > > > ... these artifacts as the 1.7.4 release of Apache Accumulo.
> > > >
> > > > This vote will remain open until at least Thu Mar 22 20:00:00 UTC
> > > 2018
> > > > (Thu Mar 22 16:00:00 EDT 2018 / Thu Mar 22 13:00:00 PDT 2018).
> > > > Voting continues until the release manager sends an email closing
> > > > the vote.
> > > >
> > > > Thanks!
> > > >
> > > > P.S. Hint: download the whole staging repo with
> > > > wget -erobots=off -r -l inf -np -nH \
> > > >
> > > https://repository.apache.org/content/repositories/
> > orgapacheaccumulo-1068/
> > > > # note the trailing slash is needed
> > > >
> > >
> >
>
