You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by GitBox <gi...@apache.org> on 2020/04/16 06:59:00 UTC
[GitHub] [hadoop] iwasakims opened a new pull request #1961: HADOOP-16972.
Ignore AuthenticationFilterInitializer for KMSWebServer.
iwasakims opened a new pull request #1961: HADOOP-16972. Ignore AuthenticationFilterInitializer for KMSWebServer.
URL: https://github.com/apache/hadoop/pull/1961
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org
[GitHub] [hadoop] hadoop-yetus commented on issue #1961: HADOOP-16972.
Ignore AuthenticationFilterInitializer for KMSWebServer.
Posted by GitBox <gi...@apache.org>.
hadoop-yetus commented on issue #1961: HADOOP-16972. Ignore AuthenticationFilterInitializer for KMSWebServer.
URL: https://github.com/apache/hadoop/pull/1961#issuecomment-614519715
:confetti_ball: **+1 overall**
| Vote | Subsystem | Runtime | Comment |
|:----:|----------:|--------:|:--------|
| +0 :ok: | reexec | 29m 13s | Docker mode activated. |
||| _ Prechecks _ |
| +1 :green_heart: | dupname | 0m 0s | No case conflicting files found. |
| +1 :green_heart: | @author | 0m 0s | The patch does not contain any @author tags. |
| +1 :green_heart: | test4tests | 0m 0s | The patch appears to include 1 new or modified test files. |
||| _ trunk Compile Tests _ |
| +1 :green_heart: | mvninstall | 21m 55s | trunk passed |
| +1 :green_heart: | compile | 17m 51s | trunk passed |
| +1 :green_heart: | checkstyle | 0m 27s | trunk passed |
| +1 :green_heart: | mvnsite | 0m 34s | trunk passed |
| +1 :green_heart: | shadedclient | 16m 36s | branch has no errors when building and testing our client artifacts. |
| +1 :green_heart: | javadoc | 0m 27s | trunk passed |
| +0 :ok: | spotbugs | 0m 45s | Used deprecated FindBugs config; considering switching to SpotBugs. |
| +1 :green_heart: | findbugs | 0m 42s | trunk passed |
||| _ Patch Compile Tests _ |
| +1 :green_heart: | mvninstall | 0m 20s | the patch passed |
| +1 :green_heart: | compile | 17m 25s | the patch passed |
| +1 :green_heart: | javac | 17m 25s | the patch passed |
| +1 :green_heart: | checkstyle | 0m 27s | the patch passed |
| +1 :green_heart: | mvnsite | 0m 33s | the patch passed |
| +1 :green_heart: | whitespace | 0m 0s | The patch has no whitespace issues. |
| +1 :green_heart: | shadedclient | 15m 22s | patch has no errors when building and testing our client artifacts. |
| +1 :green_heart: | javadoc | 0m 28s | the patch passed |
| +1 :green_heart: | findbugs | 0m 49s | the patch passed |
||| _ Other Tests _ |
| +1 :green_heart: | unit | 3m 36s | hadoop-kms in the patch passed. |
| +1 :green_heart: | asflicense | 0m 45s | The patch does not generate ASF License warnings. |
| | | 129m 42s | |
| Subsystem | Report/Notes |
|----------:|:-------------|
| Docker | Client=19.03.8 Server=19.03.8 base: https://builds.apache.org/job/hadoop-multibranch/job/PR-1961/1/artifact/out/Dockerfile |
| GITHUB PR | https://github.com/apache/hadoop/pull/1961 |
| Optional Tests | dupname asflicense compile javac javadoc mvninstall mvnsite unit shadedclient findbugs checkstyle |
| uname | Linux 5981f5e8f78d 4.15.0-91-generic #92-Ubuntu SMP Fri Feb 28 11:09:48 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux |
| Build tool | maven |
| Personality | personality/hadoop.sh |
| git revision | trunk / cc5c1da |
| Default Java | 1.8.0_242 |
| Test Results | https://builds.apache.org/job/hadoop-multibranch/job/PR-1961/1/testReport/ |
| Max. process+thread count | 366 (vs. ulimit of 5500) |
| modules | C: hadoop-common-project/hadoop-kms U: hadoop-common-project/hadoop-kms |
| Console output | https://builds.apache.org/job/hadoop-multibranch/job/PR-1961/1/console |
| versions | git=2.7.4 maven=3.3.9 findbugs=3.1.0-RC1 |
| Powered by | Apache Yetus 0.11.1 https://yetus.apache.org |
This message was automatically generated.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org
[GitHub] [hadoop] iwasakims commented on issue #1961: HADOOP-16972. Ignore
AuthenticationFilterInitializer for KMSWebServer.
Posted by GitBox <gi...@apache.org>.
iwasakims commented on issue #1961: HADOOP-16972. Ignore AuthenticationFilterInitializer for KMSWebServer.
URL: https://github.com/apache/hadoop/pull/1961#issuecomment-614470861
The added `testFilterInitializer` fails without the fix in `KMSWebServer`. The cause of "GSSException: Failure unspecified at GSS-API level (Mechanism level: Request is a replay (34))" is the same of [HDFS-14845](https://issues.apache.org/jira/browse/HDFS-14845).
```
[ERROR] testFilterInitializer(org.apache.hadoop.crypto.key.kms.server.TestKMS) Time elapsed: 0.282 s <<< ERROR!
java.io.IOException: org.apache.hadoop.security.authentication.client.AuthenticationException: Error while authenticating with endpoint: http://localhost:40145/kms/v1/keys/names
at org.apache.hadoop.crypto.key.kms.KMSClientProvider.createConnection(KMSClientProvider.java:525)
at org.apache.hadoop.crypto.key.kms.KMSClientProvider.getKeys(KMSClientProvider.java:638)
... snip
Caused by: org.apache.hadoop.security.authentication.client.AuthenticationException: Authentication failed, URL: http://localhost:40145/kms/v1/keys/names?user.name=client, status: 403, message: GSSException: Failure unspecified at GSS-API level (Mechanism level: Request is a replay (34))
at org.apache.hadoop.security.authentication.client.AuthenticatedURL.extractToken(AuthenticatedURL.java:404)
at org.apache.hadoop.security.authentication.client.PseudoAuthenticator.authenticate(PseudoAuthenticator.java:74)
at org.apache.hadoop.security.token.delegation.web.DelegationTokenAuthenticator.authenticate(DelegationTokenAuthenticator.java:143)
at org.apache.hadoop.security.authentication.client.KerberosAuthenticator.authenticate(KerberosAuthenticator.java:213)
... 41 more
```
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org
[GitHub] [hadoop] iwasakims merged pull request #1961: HADOOP-16972. Ignore
AuthenticationFilterInitializer for KMSWebServer.
Posted by GitBox <gi...@apache.org>.
iwasakims merged pull request #1961: HADOOP-16972. Ignore AuthenticationFilterInitializer for KMSWebServer.
URL: https://github.com/apache/hadoop/pull/1961
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services
---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org