[ 
https://issues.apache.org/jira/browse/SOLR-7468?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14546606#comment-14546606
 ] 

Ishan Chattopadhyaya edited comment on SOLR-7468 at 5/16/15 7:09 AM:
---------------------------------------------------------------------

+1 to extending the test. I had kept it copied because I was desperately trying 
out changes to see if the test passes consistently, but to no avail.

I finally found out that the test fails due to lack of a ticket cache in 
minikdc, and due to which all 5 servers on the node were competing to get the 
same service ticket from the minikdc for every request. hadoop-minikdc depends 
on ApacheDS, and currently using 2.0.0-M15, but support for ticket cache is 
available only after M16. [HADOOP-9893].

I suggest we mark the test as @AwaitsFix("HADOOP-9893") and revisit it later. 
Meanwhile, we can write a simple test for kerberos that tests a single 
end-point authentication.


was (Author: ichattopadhyaya):
+1 to extending the test. I had kept it copied because I was desperately trying 
out changes to see if the test passes consistently, but to no avail.

I finally found out that the test fails due to lack of a ticket cache in 
minikdc, and due to which all 5 servers on the code were competing to get the 
same service ticket from the minikdc for every request. hadoop-minikdc depends 
on ApacheDS, and currently using 2.0.0-M15, but support for ticket cache is 
available only after M16. [HADOOP-9893].

I suggest we mark the test as @AwaitsFix("HADOOP-9893") and revisit it later. 
Meanwhile, we can write a simple test for kerberos that tests a single 
end-point authentication.

> Kerberos authentication module
> ------------------------------
>
>                 Key: SOLR-7468
>                 URL: https://issues.apache.org/jira/browse/SOLR-7468
>             Project: Solr
>          Issue Type: New Feature
>          Components: security
>            Reporter: Ishan Chattopadhyaya
>         Attachments: SOLR-7468.patch, SOLR-7468.patch, SOLR-7468.patch, 
> SOLR-7468.patch, SOLR-7468.patch
>
>
> SOLR-7274 introduces a pluggable authentication framework. This issue 
> provides a Kerberos plugin implementation.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to