You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "ASF GitHub Bot (Jira)" <ji...@apache.org> on 2023/03/21 17:50:00 UTC
[jira] [Updated] (HDDS-8219) Run HA secure tests from s3g container
[ https://issues.apache.org/jira/browse/HDDS-8219?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
ASF GitHub Bot updated HDDS-8219:
---------------------------------
Labels: pull-request-available (was: )
> Run HA secure tests from s3g container
> --------------------------------------
>
> Key: HDDS-8219
> URL: https://issues.apache.org/jira/browse/HDDS-8219
> Project: Apache Ozone
> Issue Type: Sub-task
> Components: test
> Reporter: Attila Doroszlai
> Assignee: Attila Doroszlai
> Priority: Major
> Labels: pull-request-available
>
> In {{ozonesecure-ha}} environment SCM containers have hostnames like "scm1.org", but all Kerberos principals for SCM nodes are in the form {{testuser/scm@EXAMPLE.COM}}. Since no host named {{scm}} exists, lookup takes quite some time:
> {code}
> $ OZONE_LOGLEVEL=TRACE ozone sh volume create /vol1 |& grep 'lookup'
> [main] TRACE security.SecurityUtil: Name lookup for om2 took 1 ms.
> [main] TRACE security.SecurityUtil: Name lookup for om3 took 0 ms.
> [main] TRACE security.SecurityUtil: Name lookup for om1 took 0 ms.
> [main] TRACE security.SecurityUtil: Name lookup for scm took 497 ms.
> {code}
> We can improve this simply by executing the same commands from another container, e.g. {{s3g}}:
> {code}
> $ OZONE_LOGLEVEL=TRACE ozone sh volume create /vol2 |& grep 'lookup'
> [main] TRACE security.SecurityUtil: Name lookup for om2 took 1 ms.
> [main] TRACE security.SecurityUtil: Name lookup for om3 took 0 ms.
> [main] TRACE security.SecurityUtil: Name lookup for om1 took 0 ms.
> [main] TRACE security.SecurityUtil: Name lookup for s3g took 0 ms.
> {code}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org