You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Joe McDonnell (Jira)" <ji...@apache.org> on 2021/01/04 17:25:00 UTC
[jira] [Commented] (IMPALA-10392) Cipher-specific BE tests fail on
Centos 8.2
[ https://issues.apache.org/jira/browse/IMPALA-10392?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17258351#comment-17258351 ]
Joe McDonnell commented on IMPALA-10392:
----------------------------------------
I believe the thrift-server-test (SslTest.MismatchedCiphers) is related to the TLS 1.3 ciphersuites as noted in IMPALA-10069.
The rpc-mgr-kerberized-test has this output:
{noformat}
...
[==========] Running 7 tests from 1 test case.
[----------] Global test environment set-up.
[----------] 7 tests from RpcMgrKerberizedTest
[ RUN ] RpcMgrKerberizedTest.MultipleServicesTls
Dec 28 09:37:36 i-20201228-074058 krb5kdc[24021](info): AS_REQ (1 etypes {aes128-cts-hmac-sha1-96(17)}) 127.0.0.1: ISSUE: authtime 1609177056, etypes {rep=aes128-cts-hmac-sha1-96(17), tkt=aes128-cts-hmac-sha1-96(17), ses=aes128-cts-hmac-sha1-96(17)}, impala-test/i-20201228-074058@KRBTEST.COM for krbtgt/KRBTEST.COM@KRBTEST.COM
Dec 28 09:37:37 i-20201228-074058 krb5kdc[24021](info): TGS_REQ (1 etypes {aes128-cts-hmac-sha1-96(17)}) 127.0.0.1: ISSUE: authtime 1609177056, etypes {rep=aes128-cts-hmac-sha1-96(17), tkt=aes128-cts-hmac-sha1-96(17), ses=aes128-cts-hmac-sha1-96(17)}, impala-test/i-20201228-074058@KRBTEST.COM for impala-test/i-20201228-074058@KRBTEST.COM
/home/impdev/Impala/be/src/rpc/rpc-mgr-kerberized-test.cc:88: Failure
Value of: status_.ok()
Actual: false
Expected: true
Error: unable to execute ScanMem() RPC.: Runtime error: Client connection negotiation failed: client connection to 127.0.0.1:61042: SASL(-15): mechanism too weak for this user: Unable to find a callback: 32775{noformat}
This might be related to security levels. Kudu had a fix to set openssl security levels for their tests to avoid issues on Centos 8: https://github.com/apache/kudu/commit/93e85876f472b2668604ce5c15eafb17ce303989
> Cipher-specific BE tests fail on Centos 8.2
> -------------------------------------------
>
> Key: IMPALA-10392
> URL: https://issues.apache.org/jira/browse/IMPALA-10392
> Project: IMPALA
> Issue Type: Bug
> Components: Backend
> Affects Versions: Impala 4.0
> Reporter: Laszlo Gaal
> Priority: Critical
> Labels: broken-build, ramp-up
>
> When BE tests run on Centos 8.2, the following BE tests fail:
> {code}
> 2020-12-10 17:00:03.845656 The following tests FAILED:
> 2020-12-10 17:00:03.846168 68 - thrift-server-test (Failed)
> 2020-12-10 17:00:03.846231 72 - rpc-mgr-kerberized-test (Child aborted)
> {code}
> These failures were observed in a Docker-based test on private infrastructure.
> The failure seems very similar to the related bug on Ubuntu 18.04, from which ticket this issue was cloned.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org