You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tinkerpop.apache.org by "kaiyangzhang (JIRA)" <ji...@apache.org> on 2019/01/12 08:39:00 UTC

[jira] [Commented] (TINKERPOP-2132) In concurrent scenes kerberos authentication failed

    [ https://issues.apache.org/jira/browse/TINKERPOP-2132?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16741162#comment-16741162 ] 

kaiyangzhang commented on TINKERPOP-2132:
-----------------------------------------

*Single thread during the certification process,the client sends 4 messages to the server.*

1. RequestMessage\{, requestId=d67895c3-3b38-4462-96fc-bbe6b7c96bcb, op='eval', processor='', args={gremlin=g.V().limit(1), aliases={g=graphbase}, batchSize=64}}

2. RequestMessage\{, requestId=f1202bea-143d-47a5-b6e1-3648430ad91d, op='authentication', processor='', args={sasl=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, saslMechanism=GSSAPI}}

3. RequestMessage\{, requestId=f1989005-a4b1-400d-b217-07f11386776f, op='authentication', processor='', args={sasl=}}

4. RequestMessage\{, requestId=1cae7453-1b07-4dab-bd66-327f9bae75c5, op='authentication', processor='', args={sasl=BQQA/wAMAAAAAAAAA/BaugEBAAByvEFL4nfhrCbI2SA=}}

 

*Multi-thread during the certification process, the client sends N messages to the server.*

 

1. RequestMessage\{, requestId=79eab560-6ae9-49aa-8799-93041ab769a9, op='eval', processor='', args={gremlin=g.V().limit(1), aliases={g=graphbase}, batchSize=64}}


{color:#FF0000}2. RequestMessage\{, requestId=2e4c4e65-b0e5-460b-ae9f-0ec07cf0b30b, op='eval', processor='', args={gremlin=g.V().limit(1), aliases={g=graphbase}, batchSize=64}}{color}


3. RequestMessage\{, requestId=c592c33a-2969-41d6-b76c-c952e73f0695, op='authentication', processor='', args={sasl=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, saslMechanism=GSSAPI}}


4. RequestMessage\{, requestId=9999eafb-a32e-48a2-b5a5-cefdd4c38466, op='authentication', processor='', args={sasl=}}

 

5. RequestMessage\{, requestId=a68f9641-6ed2-4ff0-8646-25c8ac2ef593, op='authentication', processor='', args={sasl=BQQA/wAMAAAAAAAAHwlwtAEBAACi6yiQAyWNt5ma6jw=}}


6. RequestMessage\{, requestId=4bdc358b-faef-46f2-8d80-507fcd972679, op='eval', processor='', args={gremlin=g.V().limit(1), aliases={g=graphbase}, batchSize=64}}


7. RequestMessage\{, requestId=1279c920-b4a3-4ded-919b-52f28c1708f9, op='authentication', processor='', args={sasl=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, saslMechanism=GSSAPI}}

 

8. RequestMessage\{, requestId=297049c1-0b37-42fa-9a48-44f461fb4a17, op='authentication', processor='', args={sasl=}}


9. RequestMessage\{, requestId=09562c7f-a718-4275-9939-3fccfbc8cd3a, op='authentication', processor='', args={sasl=BQQA/wAMAAAAAAAAJTWW2wEBAAA3tCN1iWHrS4Z07Ac=}}

 

 

 

> In concurrent scenes kerberos authentication failed
> ---------------------------------------------------
>
>                 Key: TINKERPOP-2132
>                 URL: https://issues.apache.org/jira/browse/TINKERPOP-2132
>             Project: TinkerPop
>          Issue Type: Bug
>          Components: driver, server
>    Affects Versions: 3.3.2
>            Reporter: kaiyangzhang
>            Priority: Major
>
> *Scenes:*
>    1. Gremlin Server  Kerberos Authentication
>    2. Multithreading using the same client
>          DriverRemoteConnection connection = DriverRemoteConnection.using(cluster,"graphbase");
> GraphTraversalSource g = graph.traversal().withRemote(connection);
> Thread demo1 = new Thread(new ThreadDemo1(g));
>  Thread demo2 = new Thread(new ThreadDemo1(g));
>  Thread demo3 = new Thread(new ThreadDemo1(g));
>  Thread demo4 = new Thread(new ThreadDemo1(g));
>  Thread demo5 = new Thread(new ThreadDemo1(g));
> Thread demo6 = new Thread(new ThreadDemo1(g));
>  Thread demo7 = new Thread(new ThreadDemo1(g));
>  Thread demo8 = new Thread(new ThreadDemo1(g));
>  Thread demo9 = new Thread(new ThreadDemo1(g));
>  Thread demo10 = new Thread(new ThreadDemo1(g));
> *ERROR INFO*
> Exception in thread "Thread-4" java.util.concurrent.CompletionException: org.apache.tinkerpop.gremlin.driver.exception.ResponseException: Failed to authenticate
>  at java.util.concurrent.CompletableFuture.reportJoin(CompletableFuture.java:375)
>  at java.util.concurrent.CompletableFuture.join(CompletableFuture.java:1934)
>  at org.apache.tinkerpop.gremlin.driver.ResultSet.one(ResultSet.java:107)
>  at org.apache.tinkerpop.gremlin.driver.ResultSet$1.hasNext(ResultSet.java:159)
>  at org.apache.tinkerpop.gremlin.driver.ResultSet$1.next(ResultSet.java:166)
>  at org.apache.tinkerpop.gremlin.driver.ResultSet$1.next(ResultSet.java:153)
>  at org.apache.tinkerpop.gremlin.driver.remote.DriverRemoteTraversal$TraverserIterator.next(DriverRemoteTraversal.java:142)
>  at org.apache.tinkerpop.gremlin.driver.remote.DriverRemoteTraversal$TraverserIterator.next(DriverRemoteTraversal.java:127)
>  at org.apache.tinkerpop.gremlin.driver.remote.DriverRemoteTraversal.nextTraverser(DriverRemoteTraversal.java:108)
>  at org.apache.tinkerpop.gremlin.process.remote.traversal.step.map.RemoteStep.processNextStart(RemoteStep.java:80)
>  at org.apache.tinkerpop.gremlin.process.traversal.step.util.AbstractStep.hasNext(AbstractStep.java:143)
>  at org.apache.tinkerpop.gremlin.process.traversal.util.DefaultTraversal.hasNext(DefaultTraversal.java:192)
>  at com.huawei.graphbase.gremlin.ThreadDemo1.println(ThreadDemo1.java:48)
>  at com.huawei.graphbase.gremlin.ThreadDemo1.run(ThreadDemo1.java:32)
>  at java.lang.Thread.run(Thread.java:748)
> Caused by: org.apache.tinkerpop.gremlin.driver.exception.ResponseException: Failed to authenticate
>  at org.apache.tinkerpop.gremlin.driver.Handler$GremlinResponseHandler.channelRead0(Handler.java:246)
>  at org.apache.tinkerpop.gremlin.driver.Handler$GremlinResponseHandler.channelRead0(Handler.java:197)
>  at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:105)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359)
>  at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:351)
>  at org.apache.tinkerpop.gremlin.driver.Handler$GremlinSaslAuthenticationHandler.channelRead0(Handler.java:123)
>  at org.apache.tinkerpop.gremlin.driver.Handler$GremlinSaslAuthenticationHandler.channelRead0(Handler.java:67)
>  at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:105)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359)
>  at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:351)
>  at io.netty.handler.codec.MessageToMessageDecoder.channelRead(MessageToMessageDecoder.java:102)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359)
>  at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:351)
>  at org.apache.tinkerpop.gremlin.driver.handler.WebSocketClientHandler.channelRead0(WebSocketClientHandler.java:94)
>  at io.netty.channel.SimpleChannelInboundHandler.channelRead(SimpleChannelInboundHandler.java:105)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359)
>  at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:351)
>  at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:293)
>  at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:267)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359)v[2072680]
>  at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:351)
>  at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1334)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:373)
>  at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:359)
>  at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:926)
>  at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:129)
>  at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:651)
>  at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:574)
>  at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:488)
>  at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:450)
>  at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:873)
>  ... 1 more



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)