[
https://issues.apache.org/jira/browse/IMPALA-10340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17235092#comment-17235092
]
ASF subversion and git services commented on IMPALA-10340:
----------------------------------------------------------
Commit 63da9ccf0c64188a6cdd01ef8d88cfbd0c81fc9a in impala's branch
refs/heads/master from Attila Doroszlai
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=63da9cc ]
IMPALA-10340: Cannot set up KDC from scratch
IMPALA-9361 added experimental support for setting up a KDC for the mini
cluster. However, the experimental-kerberos-setup.sh script fails with
the error:
KRB5_CONFIG: unbound variable
The problem is that impala-config.sh unsets KDC-related variables if the
cluster is not kerberized or does not exist. However, kerberized
cluster cannot be created without installing KDC first.
This change updates impala-config.sh to allow setting the KDC-related
variables if IMPALA_KERBERIZE is set to 'true' and the cluster does not
exist yet.
Testing:
* successfully set up KDC via experimental-kerberos-setup.sh after
building Impala locally
* verified that impala-config.sh sets/unsets KDC-related variables
depending on cluster existence and config
* started Kerberized and non-Kerberized mini clusters (after
regenerating configs)
Change-Id: Icaed2ad2fb1e1b60951a5a4138a9386588bc6972
Reviewed-on: http://gerrit.cloudera.org:8080/16744
Reviewed-by: Tim Armstrong <tarmstr...@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenk...@cloudera.com>
> Cannot set up KDC from scratch
> ------------------------------
>
> Key: IMPALA-10340
> URL: https://issues.apache.org/jira/browse/IMPALA-10340
> Project: IMPALA
> Issue Type: Bug
> Components: Security
> Affects Versions: Impala 4.0
> Reporter: Attila Doroszlai
> Assignee: Attila Doroszlai
> Priority: Major
>
> Running {{bin/kerberos/experimental-kerberos-setup.sh}} without existing mini
> cluster fails with the following error after it installs required packages:
> {code}
> bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound
> variable
> {code}
> {{experimental-kerberos-setup.sh}} sources {{impala-config.sh}}, which uses
> {{testdata/cluster/admin is_kerberized}} to check if the cluster is
> kerberized. If it is not, all variables exported by {{minikdc_env.sh}}
> including {{KRB5_CONFIG}} are unset. The problem is that this happens even
> if the cluster is not yet created.
> However, kerberized cluster cannot be created (via
> {{create-test-configuration.sh}}) without installing KDC first, so this is
> catch 22.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org
For additional commands, e-mail: issues-all-h...@impala.apache.org
