You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@calcite.apache.org by GitBox <gi...@apache.org> on 2021/10/17 00:39:17 UTC

[GitHub] [calcite-avatica] joshelser commented on pull request #132: [CALCITE-4152] Switch to ConfigurableSpnego Jetty implementations

joshelser commented on pull request #132:
URL: https://github.com/apache/calcite-avatica/pull/132#issuecomment-944810771


   Finally got the time to revisit this. Sure enough, the java solution worked out of the box again and the python approach failed.
   
   I started poking around with GDB, which lead to LLDB, which was able to show me:
   ```
   * thread #1, queue = 'com.apple.main-thread', stop reason = signal SIGSTOP
     * frame #0: 0x00007fff202fe656 libsystem_kernel.dylib`__select + 10
       frame #1: 0x00007fff2b68fbc5 Heimdal`wait_response + 1125
       frame #2: 0x00007fff2b68ebed Heimdal`krb5_sendto_context + 1229
       frame #3: 0x00007fff2b65995c Heimdal`get_cred_kdc + 1404
       frame #4: 0x00007fff2b65b80a Heimdal`get_cred_kdc_address + 346
       frame #5: 0x00007fff2b65a33d Heimdal`get_cred_kdc_referral + 941
       frame #6: 0x00007fff2b659ec4 Heimdal`_krb5_get_cred_kdc_any + 548
       frame #7: 0x00007fff2b63e43b Heimdal`krb5_get_credentials_with_flags + 1467
       frame #8: 0x00007fff2b63de6d Heimdal`krb5_get_credentials + 61
       frame #9: 0x00007fff2d6ddbc1 GSS`gsskrb5_get_creds + 497
       frame #10: 0x00007fff2d6dd84c GSS`init_krb5_auth + 812
       frame #11: 0x00007fff2d6dcef5 GSS`_gsskrb5_init_sec_context + 965
       frame #12: 0x00007fff2d6dc0d9 GSS`gss_init_sec_context + 1209
       frame #13: 0x00007fff2d6e3984 GSS`initiator_approved + 196
       frame #14: 0x00007fff2d6e2f66 GSS`_gss_spnego_indicate_mechtypelist + 294
       frame #15: 0x00007fff2d6e299c GSS`spnego_initial + 556
       frame #16: 0x00007fff2d6e2584 GSS`_gss_spnego_init_sec_context + 292
       frame #17: 0x00007fff2d6dc0d9 GSS`gss_init_sec_context + 1209
   ```
   
   Meaning, requests-gssapi was using gssapi which was calling out to the OSX-provided Heimdal libraries instead of the MIT kerberos libraries I intended to be used. I popped open a Linux docker container and the same python code worked immediately.
   
   It seems like something with the Heimdal libraries that get bundled with OSX don't work with the current SPNEGO code in Jetty. I have no interest in trying to debug that :). I'm gonna work on getting this code cleaned up and a real pull request published.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@calcite.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org