>
>  2019-11-10 21:29:30,443 [pool-1-thread-2] ERROR - Principal: HTTP/
> stratum.antpool....@example.com is not known
>     2019-11-10 21:29:30,459 [Test worker] WARN  - NEGOTIATE authentication
> error: No valid credentials provided (Mechanism level: No valid credentials
> provided (Mechanism level: Server not found in Kerberos database (7) -
> Server not found in Kerberos database))


Usually means DNS or the SPN being acquired is not correct. Should look at
the test and see if it is trying to something like localhost and instead
doing FQDN instead. Looks like
https://github.com/apache/calcite-avatica/blob/master/server/src/test/java/org/apache/calcite/avatica/SpnegoTestUtil.java#L58
does
localhost but the principal being looked up is FQDN.
Kevin Risden



On Sun, Nov 10, 2019 at 4:53 PM Vladimir Sitnikov <
sitnikov.vladi...@gmail.com> wrote:

> Hi,
>
> I've added GitHub Actions for CI, and it looks like AvaticaSpnegoTest fails
> again.
>
> The failure is the same for Maven and Gradle, so I expect it is not caused
> by Gradle migration
>
> Maven: https://github.com/vlsi/calcite-avatica/runs/296688961#step:4:31296
> Gradle:
>
> https://github.com/vlsi/calcite-avatica/commit/d1bb6f04c905ed65931800cde0af6a9899e585b6/checks?check_suite_id=304254116#step:4:117
>
> org.apache.calcite.avatica.AvaticaSpnegoTest > testAuthenticatedClient[0]
> STANDARD_OUT
>     2019-11-10 21:29:29,707 [pool-1-thread-1] INFO  - The preauth data is
> empty.
>     2019-11-10 21:29:29,707 [pool-1-thread-1] INFO  - KRB error occurred
> while processing request: Additional pre-authentication required
>     2019-11-10 21:29:29,785 [pool-1-thread-2] INFO  - AS_REQ ISSUE:
> authtime 1573421369770,cli...@example.com for krbtgt/
> example....@example.com
>     2019-11-10 21:29:30,443 [pool-1-thread-2] ERROR - Principal: HTTP/
> stratum.antpool....@example.com is not known
>     2019-11-10 21:29:30,459 [Test worker] WARN  - NEGOTIATE authentication
> error: No valid credentials provided (Mechanism level: No valid credentials
> provided (Mechanism level: Server not found in Kerberos database (7) -
> Server not found in Kerberos database))
>
> org.apache.calcite.avatica.AvaticaSpnegoTest > testAuthenticatedClient[0]
> FAILED
>     java.lang.RuntimeException: Failed to execute HTTP Request, got
> HTTP/401
>         at
>
> org.apache.calcite.avatica.remote.AvaticaCommonsHttpClientSpnegoImpl.send(AvaticaCommonsHttpClientSpnegoImpl.java:134)
>         at
>
> org.apache.calcite.avatica.remote.RemoteService.apply(RemoteService.java:34)
>         at
> org.apache.calcite.avatica.remote.JsonService.apply(JsonService.java:172)
>         at
> org.apache.calcite.avatica.remote.Driver.connect(Driver.java:176)
>         at
> java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
>         at
> java.sql/java.sql.DriverManager.getConnection(DriverManager.java:251)
>         at
>
> org.apache.calcite.avatica.AvaticaSpnegoTest$1.run(AvaticaSpnegoTest.java:225)
>         at
>
> org.apache.calcite.avatica.AvaticaSpnegoTest$1.run(AvaticaSpnegoTest.java:223)
>         at java.base/java.security.AccessController.doPrivileged(Native
> Method)
>         at java.base/javax.security.auth.Subject.doAs(Subject.java:423)
>         at
>
> org.apache.calcite.avatica.AvaticaSpnegoTest.testAuthenticatedClient(AvaticaSpnegoTest.java:223)
>
> Is it something known?
>
> PS. The failure is only for GitHub Actions + Windows.  GitHub Actions macOS
> test passes.
>
> Vladimir
>

Reply via email to