[
https://issues.apache.org/jira/browse/SLIDER-1035?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15089275#comment-15089275
]
Kai Zheng commented on SLIDER-1035:
-----------------------------------
Very comprehensive and should be much helpful.
bq. Maximum AES encryption key length 2147483647
Not so readable, 128, 256 or ... my bad math
Suggestion:
Would be good to dump the /etc/krb5.conf, the keytab entries and credential
entries.
> Kdiag enhancements
> ------------------
>
> Key: SLIDER-1035
> URL: https://issues.apache.org/jira/browse/SLIDER-1035
> Project: Slider
> Issue Type: Improvement
> Components: client, security
> Affects Versions: Slider 0.90.2
> Environment: Kerberos
> Reporter: Steve Loughran
> Assignee: Steve Loughran
> Fix For: Slider 0.91
>
>
> Proposed enhancements
> # make easier to run server-side. the sysprops to enable com.sun debugging
> should be cached and then restored —and only set if a -verbose flag is set.
> # check for Java Crypto Extensions having full key length; fail fast if not
> # list tokens
> # add option to check networking (hostname resolves)
> # look up KDCs and fail if none are reachable
> # maybe each {{title()}} call should force flush stderr, to try and keep JDK
> output in sync with stdout.
> # am to have option to display this and also fail fast
> # implement `--services` probes for : yarn, hdfs, registry, timeline. This
> can't go into any hadoop-common lib, a list of probes classes can be provided
> to execute as the provided UGI.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
