Sergey Nuyanzin created FLINK-39880:
---------------------------------------
Summary: YARNSessionFIFOSecuredITCase fails for java25
Key: FLINK-39880
URL: https://issues.apache.org/jira/browse/FLINK-39880
Project: Flink
Issue Type: Sub-task
Components: Build System / CI, Deployment / YARN, Tests
Reporter: Sergey Nuyanzin
Assignee: Sergey Nuyanzin
{noformat}
java.lang.RuntimeException: Exception occurred while setting up secure test
context. Reason: {}
Jun 06 15:44:22 at
org.apache.flink.yarn.YARNSessionFIFOSecuredITCase.setup(YARNSessionFIFOSecuredITCase.java:124)
Jun 06 15:44:22 at
java.base/java.lang.reflect.Method.invoke(Method.java:565)
Jun 06 15:44:22 at
java.base/java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:511)
Jun 06 15:44:22 at
java.base/java.util.concurrent.ForkJoinPool$WorkQueue.topLevelExec(ForkJoinPool.java:1450)
Jun 06 15:44:22 at
java.base/java.util.concurrent.ForkJoinPool.runWorker(ForkJoinPool.java:2019)
Jun 06 15:44:22 at
java.base/java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:187)
Jun 06 15:44:22 Caused by:
org.apache.flink.runtime.security.modules.SecurityModule$SecurityInstallException:
Unable to set the Hadoop login user
Jun 06 15:44:22 at
org.apache.flink.runtime.security.modules.HadoopModule.install(HadoopModule.java:119)
Jun 06 15:44:22 at
org.apache.flink.runtime.security.SecurityUtils.installModules(SecurityUtils.java:76)
Jun 06 15:44:22 at
org.apache.flink.runtime.security.SecurityUtils.install(SecurityUtils.java:57)
Jun 06 15:44:22 at
org.apache.flink.test.util.TestingSecurityContext.install(TestingSecurityContext.java:46)
Jun 06 15:44:22 at
org.apache.flink.yarn.YARNSessionFIFOSecuredITCase.setup(YARNSessionFIFOSecuredITCase.java:105)
Jun 06 15:44:22 ... 5 more
Jun 06 15:44:22 Caused by: org.apache.hadoop.security.KerberosAuthException:
failure to login: for principal: hadoop/[email protected] from keytab
/tmp/junit-9160832649541054399/test-users.keytab
javax.security.auth.login.LoginException: null (5001) -
org/apache/kerby/kerberos/kerb/type/kdc/KdcClientRequest
Jun 06 15:44:22 at
org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2068)
Jun 06 15:44:22 at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1396)
Jun 06 15:44:22 at
org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1134)
Jun 06 15:44:22 at
org.apache.flink.runtime.security.token.hadoop.KerberosLoginProvider.doLogin(KerberosLoginProvider.java:96)
Jun 06 15:44:22 at
org.apache.flink.runtime.security.modules.HadoopModule.install(HadoopModule.java:75)
Jun 06 15:44:22 ... 9 more
Jun 06 15:44:22 Caused by: javax.security.auth.login.LoginException: null
(5001) - org/apache/kerby/kerberos/kerb/type/kdc/KdcClientRequest
Jun 06 15:44:22 at
jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:789)
Jun 06 15:44:22 at
jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:601)
Jun 06 15:44:22 at
java.base/javax.security.auth.login.LoginContext.invoke(LoginContext.java:603)
Jun 06 15:44:22 at
java.base/javax.security.auth.login.LoginContext.login(LoginContext.java:460)
Jun 06 15:44:22 at
org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2152)
Jun 06 15:44:22 at
org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2051)
Jun 06 15:44:22 ... 13 more
Jun 06 15:44:22 Caused by: KrbException: null (5001) -
org/apache/kerby/kerberos/kerb/type/kdc/KdcClientRequest
Jun 06 15:44:22 at
java.security.jgss/sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:82)
Jun 06 15:44:22 at
java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(KrbAsReqBuilder.java:347)
Jun 06 15:44:22 at
java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:500)
Jun 06 15:44:22 at
jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:765)
Jun 06 15:44:22 ... 18 more
Jun 06 15:44:22 Caused by: KrbException: Identifier doesn't match expected
value (906)
Jun 06 15:44:22 at
java.security.jgss/sun.security.krb5.internal.KDCRep.init(KDCRep.java:141)
Jun 06 15:44:22 at
java.security.jgss/sun.security.krb5.internal.ASRep.init(ASRep.java:64)
Jun 06 15:44:22 at
java.security.jgss/sun.security.krb5.internal.ASRep.<init>(ASRep.java:59)
Jun 06 15:44:22 at
java.security.jgss/sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:60)
Jun 06 15:44:22 ... 21 more
{noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
