[
https://issues.apache.org/jira/browse/HBASE-25051?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17810258#comment-17810258
]
ASF GitHub Bot commented on HBASE-25051:
----------------------------------------
Apache-HBase commented on PR #5631:
URL: https://github.com/apache/hbase/pull/5631#issuecomment-1907618566
:broken_heart: **-1 overall**
| Vote | Subsystem | Runtime | Comment |
|:----:|----------:|--------:|:--------|
| +0 :ok: | reexec | 0m 25s | Docker mode activated. |
| -0 :warning: | yetus | 0m 2s | Unprocessed flag(s):
--brief-report-file --spotbugs-strict-precheck --whitespace-eol-ignore-list
--whitespace-tabs-ignore-list --quick-hadoopcheck |
||| _ Prechecks _ |
||| _ master Compile Tests _ |
| +0 :ok: | mvndep | 0m 12s | Maven dependency ordering for branch |
| +1 :green_heart: | mvninstall | 2m 33s | master passed |
| +1 :green_heart: | compile | 1m 31s | master passed |
| +1 :green_heart: | shadedjars | 5m 28s | branch has no errors when
building our shaded downstream artifacts. |
| +1 :green_heart: | javadoc | 0m 58s | master passed |
||| _ Patch Compile Tests _ |
| +0 :ok: | mvndep | 0m 11s | Maven dependency ordering for patch |
| -1 :x: | mvninstall | 1m 10s | root in the patch failed. |
| -1 :x: | compile | 0m 35s | hbase-server in the patch failed. |
| -0 :warning: | javac | 0m 35s | hbase-server in the patch failed. |
| -1 :x: | shadedjars | 4m 4s | patch has 17 errors when building our
shaded downstream artifacts. |
| +1 :green_heart: | javadoc | 0m 55s | the patch passed |
||| _ Other Tests _ |
| +1 :green_heart: | unit | 0m 25s | hbase-protocol-shaded in the patch
passed. |
| +1 :green_heart: | unit | 2m 15s | hbase-common in the patch passed.
|
| +1 :green_heart: | unit | 1m 12s | hbase-client in the patch passed.
|
| -1 :x: | unit | 0m 34s | hbase-server in the patch failed. |
| | | 25m 8s | |
| Subsystem | Report/Notes |
|----------:|:-------------|
| Docker | ClientAPI=1.43 ServerAPI=1.43 base:
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/artifact/yetus-jdk8-hadoop3-check/output/Dockerfile
|
| GITHUB PR | https://github.com/apache/hbase/pull/5631 |
| Optional Tests | javac javadoc unit shadedjars compile |
| uname | Linux 32568b14addf 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May
23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux |
| Build tool | maven |
| Personality | dev-support/hbase-personality.sh |
| git revision | master / 3a91c5b698 |
| Default Java | Temurin-1.8.0_352-b08 |
| mvninstall |
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/artifact/yetus-jdk8-hadoop3-check/output/patch-mvninstall-root.txt
|
| compile |
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/artifact/yetus-jdk8-hadoop3-check/output/patch-compile-hbase-server.txt
|
| javac |
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/artifact/yetus-jdk8-hadoop3-check/output/patch-compile-hbase-server.txt
|
| shadedjars |
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/artifact/yetus-jdk8-hadoop3-check/output/patch-shadedjars.txt
|
| unit |
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/artifact/yetus-jdk8-hadoop3-check/output/patch-unit-hbase-server.txt
|
| Test Results |
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/testReport/
|
| Max. process+thread count | 375 (vs. ulimit of 30000) |
| modules | C: hbase-protocol-shaded hbase-common hbase-client hbase-server
U: . |
| Console output |
https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-5631/3/console
|
| versions | git=2.34.1 maven=3.8.6 |
| Powered by | Apache Yetus 0.12.0 https://yetus.apache.org |
This message was automatically generated.
> DIGEST based auth broken for rpc based ConnectionRegistry
> ---------------------------------------------------------
>
> Key: HBASE-25051
> URL: https://issues.apache.org/jira/browse/HBASE-25051
> Project: HBase
> Issue Type: Sub-task
> Components: Client, security
> Affects Versions: 3.0.0-alpha-1, 2.3.0, 1.7.0
> Reporter: Bharath Vissapragada
> Assignee: Duo Zhang
> Priority: Minor
>
> DIGEST-MD5 based sasl auth depends on cluster-ID to obtain tokens. With
> master registry, we have a circular dependency here because master registry
> needs an rpcClient to talk to masters (and to get cluster ID) and rpc-Client
> needs a clusterId if DIGEST based auth is configured. Earlier, there was a ZK
> client that has its own authentication mechanism to fetch the cluster ID.
> HBASE-23330, I think doesn't fully fix the problem. It depends on an active
> connection to fetch delegation tokens for the MR job and that inherently
> assumes that the active connection does not use a DIGEST auth.
> It is not clear to me how common it is to use DIGEST based auth in
> connections.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
