Yeah, the expectation is that all of the tests are using localhost (to
specifically avoid issues around trying to pull the FQDN and relying
on the developer to have specific setups).

On Mon, Nov 11, 2019 at 3:38 PM Kevin Risden <kris...@apache.org> wrote:
>
> >
> >  2019-11-10 21:29:30,443 [pool-1-thread-2] ERROR - Principal: HTTP/
> > stratum.antpool....@example.com is not known
> >     2019-11-10 21:29:30,459 [Test worker] WARN  - NEGOTIATE authentication
> > error: No valid credentials provided (Mechanism level: No valid credentials
> > provided (Mechanism level: Server not found in Kerberos database (7) -
> > Server not found in Kerberos database))
>
>
> Usually means DNS or the SPN being acquired is not correct. Should look at
> the test and see if it is trying to something like localhost and instead
> doing FQDN instead. Looks like
> https://github.com/apache/calcite-avatica/blob/master/server/src/test/java/org/apache/calcite/avatica/SpnegoTestUtil.java#L58
> does
> localhost but the principal being looked up is FQDN.
> Kevin Risden
>
>
>
> On Sun, Nov 10, 2019 at 4:53 PM Vladimir Sitnikov <
> sitnikov.vladi...@gmail.com> wrote:
>
> > Hi,
> >
> > I've added GitHub Actions for CI, and it looks like AvaticaSpnegoTest fails
> > again.
> >
> > The failure is the same for Maven and Gradle, so I expect it is not caused
> > by Gradle migration
> >
> > Maven: https://github.com/vlsi/calcite-avatica/runs/296688961#step:4:31296
> > Gradle:
> >
> > https://github.com/vlsi/calcite-avatica/commit/d1bb6f04c905ed65931800cde0af6a9899e585b6/checks?check_suite_id=304254116#step:4:117
> >
> > org.apache.calcite.avatica.AvaticaSpnegoTest > testAuthenticatedClient[0]
> > STANDARD_OUT
> >     2019-11-10 21:29:29,707 [pool-1-thread-1] INFO  - The preauth data is
> > empty.
> >     2019-11-10 21:29:29,707 [pool-1-thread-1] INFO  - KRB error occurred
> > while processing request: Additional pre-authentication required
> >     2019-11-10 21:29:29,785 [pool-1-thread-2] INFO  - AS_REQ ISSUE:
> > authtime 1573421369770,cli...@example.com for krbtgt/
> > example....@example.com
> >     2019-11-10 21:29:30,443 [pool-1-thread-2] ERROR - Principal: HTTP/
> > stratum.antpool....@example.com is not known
> >     2019-11-10 21:29:30,459 [Test worker] WARN  - NEGOTIATE authentication
> > error: No valid credentials provided (Mechanism level: No valid credentials
> > provided (Mechanism level: Server not found in Kerberos database (7) -
> > Server not found in Kerberos database))
> >
> > org.apache.calcite.avatica.AvaticaSpnegoTest > testAuthenticatedClient[0]
> > FAILED
> >     java.lang.RuntimeException: Failed to execute HTTP Request, got
> > HTTP/401
> >         at
> >
> > org.apache.calcite.avatica.remote.AvaticaCommonsHttpClientSpnegoImpl.send(AvaticaCommonsHttpClientSpnegoImpl.java:134)
> >         at
> >
> > org.apache.calcite.avatica.remote.RemoteService.apply(RemoteService.java:34)
> >         at
> > org.apache.calcite.avatica.remote.JsonService.apply(JsonService.java:172)
> >         at
> > org.apache.calcite.avatica.remote.Driver.connect(Driver.java:176)
> >         at
> > java.sql/java.sql.DriverManager.getConnection(DriverManager.java:677)
> >         at
> > java.sql/java.sql.DriverManager.getConnection(DriverManager.java:251)
> >         at
> >
> > org.apache.calcite.avatica.AvaticaSpnegoTest$1.run(AvaticaSpnegoTest.java:225)
> >         at
> >
> > org.apache.calcite.avatica.AvaticaSpnegoTest$1.run(AvaticaSpnegoTest.java:223)
> >         at java.base/java.security.AccessController.doPrivileged(Native
> > Method)
> >         at java.base/javax.security.auth.Subject.doAs(Subject.java:423)
> >         at
> >
> > org.apache.calcite.avatica.AvaticaSpnegoTest.testAuthenticatedClient(AvaticaSpnegoTest.java:223)
> >
> > Is it something known?
> >
> > PS. The failure is only for GitHub Actions + Windows.  GitHub Actions macOS
> > test passes.
> >
> > Vladimir
> >

Reply via email to