Halim Kim has posted comments on this change. ( http://gerrit.cloudera.org:8080/20278 )
Change subject: KUDU-3496 support spnego dedicated keytab ...................................................................... Patch Set 6: > Overall looks good to me, thanks for adding tests! > There is a macOS test issue on my end: > Running the webserver-test fails with: SpnegoWebserverTest.TestAuthenticated > However if I run this test individually, it runs successfully. > If you have a macOS station, could you please check this issue > out?(maybe its just an env issue on my end) If you don't have > access to macOS station, let me know, and I can help look into > this. I've checked the same situation happens on my mac. --- [ RUN ] SpnegoWebserverTest.TestAuthenticated Initializing database '/private/tmp/kudutest-501/webserver-test.0.SpnegoWebserverTest.TestAuthenticated.1699520747882600-92342-0/krb5kdc/principal' for realm 'KRBTEST.COM', master key name 'K/m...@krbtest.com' 11 09 18:05:49 MyMac.local krb5kdc[92386](info): Loaded 11 09 18:05:49 MyMac.local krb5kdc[92386](Error): preauth pkinit failed to initialize: PKINIT initialization failed: No pkinit_identity supplied for realm KRBTEST.COM 11 09 18:05:49 MyMac.local krb5kdc[92386](Error): preauth spake failed to initialize: No SPAKE preauth groups configured 11 09 18:05:49 MyMac.local krb5kdc[92386](info): setting up network... 11 09 18:05:49 MyMac.local krb5kdc[92386](info): setsockopt(9,IPV6_V6ONLY,1) worked 11 09 18:05:49 MyMac.local krb5kdc[92386](info): set up 2 sockets 11 09 18:05:49 MyMac.local krb5kdc[92386](info): commencing operation krb5kdc: starting... No policy specified for HTTP/127.0....@krbtest.com; defaulting to no policy Authenticating as principal user/ad...@krbtest.com with password. Principal "HTTP/127.0....@krbtest.com" created. Authenticating as principal user/ad...@krbtest.com with password. Entry for principal HTTP/127.0.0.1 with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:/private/tmp/kudutest-501/webserver-test.0.SpnegoWebserverTest.TestAuthenticated.1699520747882600-92342-0/krb5kdc/HTTP_127.0.0.1.keytab. Entry for principal HTTP/127.0.0.1 with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:/private/tmp/kudutest-501/webserver-test.0.SpnegoWebserverTest.TestAuthenticated.1699520747882600-92342-0/krb5kdc/HTTP_127.0.0.1.keytab. No policy specified for al...@krbtest.com; defaulting to no policy Authenticating as principal user/ad...@krbtest.com with password. Principal "al...@krbtest.com" created. I20231109 18:05:49.678123 5597282 webserver.cc:412] Webserver started at http://0.0.0.0:57966/ using document root /private/tmp/kudutest-501/webserver-test.0.SpnegoWebserverTest.TestAuthenticated.1699520747882600-92342-0/webserver-docroot and password file <none> 11 09 18:05:49 MyMac.local krb5kdc[92386](info): AS_REQ (2 etypes {aes128-cts-hmac-sha1-96(17), DEPRECATED:des3-cbc-sha1(16)}) 127.0.0.1: ISSUE: authtime 1699520749, etypes {rep=aes128-cts-hmac-sha1-96(17), tkt=aes128-cts-hmac-sha1-96(17), ses=aes128-cts-hmac-sha1-96(17)}, al...@krbtest.com for krbtgt/krbtest....@krbtest.com Password for al...@krbtest.com: /Users/user/IdeaProjects/kudu/src/kudu/server/webserver-test.cc:304: Failure Failed Bad status: Remote error: HTTP 401 I20231109 18:05:49.726493 5597282 test_util.cc:175] ----------------------------------------------- I20231109 18:05:49.726526 5597282 test_util.cc:176] Had fatal failures, leaving test files at /private/tmp/kudutest-501/webserver-test.0.SpnegoWebserverTest.TestAuthenticated.1699520747882600-92342-0 [ FAILED ] SpnegoWebserverTest.TestAuthenticated (214 ms) --- I'll let you know if i find the cause. -- To view, visit http://gerrit.cloudera.org:8080/20278 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: comment Gerrit-Change-Id: I01646207954854d67308f99e6b71ba32c019ed6a Gerrit-Change-Number: 20278 Gerrit-PatchSet: 6 Gerrit-Owner: Halim Kim <rlagk...@gmail.com> Gerrit-Reviewer: Halim Kim <rlagk...@gmail.com> Gerrit-Reviewer: Kudu Jenkins (120) Gerrit-Reviewer: Marton Greber <greber...@gmail.com> Gerrit-Reviewer: Wang Xixu <1450306...@qq.com> Gerrit-Reviewer: Zoltan Martonka <zmarto...@cloudera.com> Gerrit-Comment-Date: Thu, 09 Nov 2023 10:40:12 +0000 Gerrit-HasComments: No
