You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Attila Doroszlai (Jira)" <ji...@apache.org> on 2020/11/18 14:37:00 UTC
[jira] [Updated] (IMPALA-10340) Cannot set up KDC from scratch
[ https://issues.apache.org/jira/browse/IMPALA-10340?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Attila Doroszlai updated IMPALA-10340:
--------------------------------------
Description:
Running {{bin/kerberos/experimental-kerberos-setup.sh}} without existing mini cluster fails with the following error after it installs required packages:
{code}
bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound variable
{code}
{{experimental-kerberos-setup.sh}} sources {{impala-config.sh}}, which uses {{testdata/cluster/admin is_kerberized}} to check if the cluster is kerberized. If it is not, all variables exported by {{minikdc_env.sh}} including {{KRB5_CONFIG}} are unset. The problem is that this happens even if the cluster is not yet created.
However, kerberized cluster cannot be created without installing KDC first, so this is catch 22.
was:
Running {{bin/kerberos/experimental-kerberos-setup.sh}} without existing mini cluster fails with the following error after it installs required packages:
{code}
bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound variable
{code}
{{experimental-kerberos-setup.sh}} sources {{impala-config.sh}}, which uses {{testdata/cluster/admin is_kerberized}} to check if the cluster is kerberized. If it is not, all variables exported by {{minikdc_env.sh}} are including {{KRB5_CONFIG}} are unset. The problem is that this happens even if the cluster is not yet created.
However, kerberized cluster cannot be created without installing KDC first, so this is catch 22.
> Cannot set up KDC from scratch
> ------------------------------
>
> Key: IMPALA-10340
> URL: https://issues.apache.org/jira/browse/IMPALA-10340
> Project: IMPALA
> Issue Type: Bug
> Components: Security
> Affects Versions: Impala 4.0
> Reporter: Attila Doroszlai
> Assignee: Attila Doroszlai
> Priority: Major
>
> Running {{bin/kerberos/experimental-kerberos-setup.sh}} without existing mini cluster fails with the following error after it installs required packages:
> {code}
> bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound variable
> {code}
> {{experimental-kerberos-setup.sh}} sources {{impala-config.sh}}, which uses {{testdata/cluster/admin is_kerberized}} to check if the cluster is kerberized. If it is not, all variables exported by {{minikdc_env.sh}} including {{KRB5_CONFIG}} are unset. The problem is that this happens even if the cluster is not yet created.
> However, kerberized cluster cannot be created without installing KDC first, so this is catch 22.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org