[
https://issues.apache.org/jira/browse/IMPALA-10340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Attila Doroszlai updated IMPALA-10340:
--------------------------------------
Description:
Running {{bin/kerberos/experimental-kerberos-setup.sh}} without existing mini
cluster fails with the following error after it installs required packages:
{code}
bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound
variable
{code}
{{experimental-kerberos-setup.sh}} sources {{impala-config.sh}}, which uses
{{testdata/cluster/admin is_kerberized}} to check if the cluster is kerberized.
If it is not, all variables exported by {{minikdc_env.sh}} including
{{KRB5_CONFIG}} are unset. The problem is that this happens even if the
cluster is not yet created.
However, kerberized cluster cannot be created without installing KDC first, so
this is catch 22.
was:
Running {{bin/kerberos/experimental-kerberos-setup.sh}} without existing mini
cluster fails with the following error after it installs required packages:
{code}
bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound
variable
{code}
{{experimental-kerberos-setup.sh}} sources {{impala-config.sh}}, which uses
{{testdata/cluster/admin is_kerberized}} to check if the cluster is kerberized.
If it is not, all variables exported by {{minikdc_env.sh}} are including
{{KRB5_CONFIG}} are unset. The problem is that this happens even if the
cluster is not yet created.
However, kerberized cluster cannot be created without installing KDC first, so
this is catch 22.
> Cannot set up KDC from scratch
> ------------------------------
>
> Key: IMPALA-10340
> URL: https://issues.apache.org/jira/browse/IMPALA-10340
> Project: IMPALA
> Issue Type: Bug
> Components: Security
> Affects Versions: Impala 4.0
> Reporter: Attila Doroszlai
> Assignee: Attila Doroszlai
> Priority: Major
>
> Running {{bin/kerberos/experimental-kerberos-setup.sh}} without existing mini
> cluster fails with the following error after it installs required packages:
> {code}
> bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound
> variable
> {code}
> {{experimental-kerberos-setup.sh}} sources {{impala-config.sh}}, which uses
> {{testdata/cluster/admin is_kerberized}} to check if the cluster is
> kerberized. If it is not, all variables exported by {{minikdc_env.sh}}
> including {{KRB5_CONFIG}} are unset. The problem is that this happens even
> if the cluster is not yet created.
> However, kerberized cluster cannot be created without installing KDC first,
> so this is catch 22.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
