Gordon, Thanks for letting me know that the issue still exists. I committed a fix to the tests in QPID-8426 which changes the test to use the same domain in service principal name and kdc. Previously, kdc domain was set to InetAddress.getLoopbackAddress().getCanonicalHostName() whilst SPN domain was hard-coded to "localhost". I suspect that the difference in domain name could cause the test failure.
Kind Regards, Alex On Wed, 11 Mar 2020 at 12:39, Gordon Sim <[email protected]> wrote: > On 11/03/2020 12:22 pm, Oleksandr Rudyy wrote: > > Gordon, > > Do you still see any test failures from test suites > > KerberosAuthenticationManagerTest and SpnegoAuthenticatorTest in your > > environment? > > Yes: > > > [ERROR] Tests run: 4, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: > 0.277 s <<< FAILURE! - in > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest > > [ERROR] > testCreateSaslNegotiator(org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest) > Time elapsed: 0.095 s <<< ERROR! > > java.security.PrivilegedActionException > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137) > > Caused by: javax.security.sasl.SaslException: GSS initiate failed > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137) > > Caused by: org.ietf.jgss.GSSException: No valid credentials provided > (Mechanism level: Server not found in Kerberos database (7) - Server not > found in Kerberos database) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137) > > Caused by: sun.security.krb5.KrbException: Server not found in Kerberos > database (7) - Server not found in Kerberos database > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137) > > Caused by: sun.security.krb5.Asn1Exception: Identifier doesn't match > expected value (906) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212) > > at > org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137) > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
