mattcasters commented on PR #8287: URL: https://github.com/apache/hop/pull/8287#issuecomment-5599974121
The WebHDFS Test failure (`Failed to find any Kerberos tgt`) was SPNEGO running **outside** `Subject.doAs`. Test Kerberos puts the TGT on the login Subject; GSS with `useSubjectCredsOnly=true` cannot see it on the SWT thread. Pushed on this branch: - SPNEGO token is built inside `session.doAs` (same path the real VFS calls use). - Test connection now reports each step (TLS, Kerberos login, SPNEGO `HTTP@host`, GETFILESTATUS). On failure the dialog lists what succeeded, what failed, and a short hint. Rebuild the Hadoop plugin (and hop-ui if you have not since the last Test-button fix) and run Test connection again. If SPNEGO itself fails next, the hint will be about `HTTP/fqdn@REALM` / reverse DNS rather than a missing TGT. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
