You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@kudu.apache.org by "Alexey Serbin (Code Review)" <ge...@cloudera.org> on 2017/03/15 16:59:13 UTC

[kudu-CR] [security] added 'failed KDC' integration test

Alexey Serbin has uploaded a new change for review.

  http://gerrit.cloudera.org:8080/6405

Change subject: [security] added 'failed KDC' integration test
......................................................................

[security] added 'failed KDC' integration test

Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
---
M src/kudu/integration-tests/CMakeLists.txt
A src/kudu/integration-tests/security_components_faults-itest.cc
M src/kudu/security/test/mini_kdc-test.cc
M src/kudu/security/test/mini_kdc.cc
M src/kudu/util/subprocess.h
5 files changed, 298 insertions(+), 24 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/05/6405/1
-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Dan Burkert (Code Review)" <ge...@cloudera.org>.
Dan Burkert has posted comments on this change.

Change subject: [security] added 'failed KDC' integration test
......................................................................


Patch Set 1:

(6 comments)

http://gerrit.cloudera.org:8080/#/c/6405/1/src/kudu/integration-tests/CMakeLists.txt
File src/kudu/integration-tests/CMakeLists.txt:

Line 80: ADD_KUDU_TEST(security_components_faults-itest)
Couple of nits on the name:

'components' isn't very descriptive in this context, so I would drop it.

I think our convention is to use dashes over underscores when the name isn't a code module, so this should be 'security-faults-itest'.


http://gerrit.cloudera.org:8080/#/c/6405/1/src/kudu/integration-tests/security_components_faults-itest.cc
File src/kudu/integration-tests/security_components_faults-itest.cc:

Line 61:         krb_lifetime_seconds_(8) {
Does this test get flaky with a smaller lifetime?  This test takes about 25s on my machine, which is pretty long


Line 85:     /*
consider removing


Line 188:   FLAGS_rpc_trace_negotiation = true;
FYI failing negotiations are always traced.  This is fine if you want successful ones as well.


Line 206:   // until it's clarified.
I think this is just the crappy heimdal error message.  Instead of ideffing this out, could you just add that as a valid match in the regex below?


http://gerrit.cloudera.org:8080/#/c/6405/1/src/kudu/security/test/mini_kdc.cc
File src/kudu/security/test/mini_kdc.cc:

Line 178:   const bool need_config_update = (options_.port == 0);
Is pulling this out to a local necessary?  Looks like it might be leftover from an intermediate revision.


-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>
Gerrit-HasComments: Yes

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Dan Burkert (Code Review)" <ge...@cloudera.org>.
Dan Burkert has posted comments on this change.

Change subject: [security] added 'failed KDC' integration test
......................................................................


Patch Set 3: Code-Review+2

(1 comment)

http://gerrit.cloudera.org:8080/#/c/6405/1/src/kudu/integration-tests/security_components_faults-itest.cc
File src/kudu/integration-tests/security_components_faults-itest.cc:

Line 188
> Yep, that's exactly what I saw.  I was curious to see what's going on in ca
if it's helpful for debugging then feel free to keep it on.


-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 3
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>
Gerrit-HasComments: Yes

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Hello Kudu Jenkins,

I'd like you to reexamine a change.  Please visit

    http://gerrit.cloudera.org:8080/6405

to look at the new patch set (#2).

Change subject: [security] added 'failed KDC' integration test
......................................................................

[security] added 'failed KDC' integration test

Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
---
M src/kudu/integration-tests/CMakeLists.txt
A src/kudu/integration-tests/security-faults-itest.cc
2 files changed, 226 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/05/6405/2
-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 2
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has posted comments on this change.

Change subject: [security] added 'failed KDC' integration test
......................................................................


Patch Set 3:

> Build Failed
 > 
 > http://104.196.14.100/job/kudu-gerrit/7016/ : FAILURE

The failure is due to memory leak in Krb5CallToStatus.  I posted a separate patch to fix the leak: https://gerrit.cloudera.org/#/c/6411/

-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 3
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>
Gerrit-HasComments: No

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has posted comments on this change.

Change subject: [security] added 'failed KDC' integration test
......................................................................


Patch Set 1:

(8 comments)

http://gerrit.cloudera.org:8080/#/c/6405/1/src/kudu/integration-tests/CMakeLists.txt
File src/kudu/integration-tests/CMakeLists.txt:

Line 80: ADD_KUDU_TEST(security_components_faults-itest)
> Couple of nits on the name:
I like that dashed version better.  Thanks!


http://gerrit.cloudera.org:8080/#/c/6405/1/src/kudu/integration-tests/security_components_faults-itest.cc
File src/kudu/integration-tests/security_components_faults-itest.cc:

Line 43: using std::atomic;
> warning: using decl 'atomic' is unused [misc-unused-using-decls]
Done


Line 45: using std::thread;
> warning: using decl 'thread' is unused [misc-unused-using-decls]
Done


Line 61:         krb_lifetime_seconds_(8) {
> Does this test get flaky with a smaller lifetime?  This test takes about 25
Wow, I didn't realize it would run so long.  The reason I put 8 seconds is because I saw some issues with Sailesh's Kerberos tickets renewal/re-acquisition test for ASAN/TSAN builds.

I'll update it and set shorter TTL for non-SAN builds then.


Line 85:     /*
> consider removing
Done


Line 188:   FLAGS_rpc_trace_negotiation = true;
> FYI failing negotiations are always traced.  This is fine if you want succe
Yep, that's exactly what I saw.  I was curious to see what's going on in case of successful negotiation in this case as well, thinking that it might give me some hints in something else breaks later.  Do you think it's better to keep info on successful negotiations off?


Line 206:   // until it's clarified.
> I think this is just the crappy heimdal error message.  Instead of ideffing
Sounds good to me -- I added that (actually, that's more about making this work with other version on krb5 library we have somewhere on one of our test machines).  As for OS X, calling causes the next call to SmokeTestCluster() fail.  Probably, that's due to some difference on type of cache on OS X and Linux or how kinit works?  So, that's not clear to me.


http://gerrit.cloudera.org:8080/#/c/6405/1/src/kudu/security/test/mini_kdc.cc
File src/kudu/security/test/mini_kdc.cc:

Line 178:   const bool need_config_update = (options_.port == 0);
> Is pulling this out to a local necessary?  Looks like it might be leftover 
uh-oh.  Yes -- you are right.  I submitted a separate patch for that.  Will rebase on top of that.


-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>
Gerrit-HasComments: Yes

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has submitted this change and it was merged.

Change subject: [security] added 'failed KDC' integration test
......................................................................


[security] added 'failed KDC' integration test

Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Reviewed-on: http://gerrit.cloudera.org:8080/6405
Reviewed-by: Dan Burkert <da...@apache.org>
Tested-by: Alexey Serbin <as...@cloudera.com>
---
M src/kudu/integration-tests/CMakeLists.txt
A src/kudu/integration-tests/security-faults-itest.cc
2 files changed, 226 insertions(+), 0 deletions(-)

Approvals:
  Dan Burkert: Looks good to me, approved
  Alexey Serbin: Verified



-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 4
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has posted comments on this change.

Change subject: [security] added 'failed KDC' integration test
......................................................................


Patch Set 1:

> Build Failed
 > 
 > http://104.196.14.100/job/kudu-gerrit/7005/ : FAILURE

Ugh, it worked fine if not under Jenkins.  Probably, I should take care of crashed processes or somehow disable spilling that info so Jenkins catches it.

-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>
Gerrit-HasComments: No

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Alexey Serbin has posted comments on this change.

Change subject: [security] added 'failed KDC' integration test
......................................................................


Patch Set 3: Verified+1

The fix for the build failure is posted as a separate patch: https://gerrit.cloudera.org/#/c/6411/

-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 3
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>
Gerrit-HasComments: No

[kudu-CR] [security] added 'failed KDC' integration test

Posted by "Alexey Serbin (Code Review)" <ge...@cloudera.org>.
Hello Kudu Jenkins,

I'd like you to reexamine a change.  Please visit

    http://gerrit.cloudera.org:8080/6405

to look at the new patch set (#3).

Change subject: [security] added 'failed KDC' integration test
......................................................................

[security] added 'failed KDC' integration test

Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
---
M src/kudu/integration-tests/CMakeLists.txt
A src/kudu/integration-tests/security-faults-itest.cc
2 files changed, 226 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/05/6405/3
-- 
To view, visit http://gerrit.cloudera.org:8080/6405
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ib9f403d4d1458dbb3380377fa95794c05ac69af5
Gerrit-PatchSet: 3
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Alexey Serbin <as...@cloudera.com>
Gerrit-Reviewer: Dan Burkert <da...@apache.org>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Tidy Bot
Gerrit-Reviewer: Todd Lipcon <to...@apache.org>