You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2020/05/04 00:22:00 UTC
[jira] [Commented] (QPID-8426) [Broker-J][Tests] Kerberos
integration tests can sporadically fail in some environments
[ https://issues.apache.org/jira/browse/QPID-8426?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17098607#comment-17098607 ]
ASF subversion and git services commented on QPID-8426:
-------------------------------------------------------
Commit 1f94dfdaad151eba5b26794ad12ebdb2a4308366 in qpid-broker-j's branch refs/heads/master from Alex Rudyy
[ https://gitbox.apache.org/repos/asf?p=qpid-broker-j.git;h=1f94dfd ]
QPID-8426: [Broker-J] Update service principal names in login module to match host domain
> [Broker-J][Tests] Kerberos integration tests can sporadically fail in some environments
> ---------------------------------------------------------------------------------------
>
> Key: QPID-8426
> URL: https://issues.apache.org/jira/browse/QPID-8426
> Project: Qpid
> Issue Type: Bug
> Components: Java Tests
> Affects Versions: qpid-java-broker-8.0.0, qpid-java-broker-7.1.5, qpid-java-broker-7.1.6, qpid-java-broker-7.1.7, qpid-java-broker-7.1.8
> Reporter: Alex Rudyy
> Priority: Major
>
> Integration tests from test suites {{KerberosAuthenticationManagerTest}} and {{SpnegoAuthenticatorTest}} can fail as below
> {noformat}
> [ERROR] Tests run: 4, Failures: 0, Errors: 1, Skipped: 0, Time elapsed: 0.277 s <<< FAILURE! - in org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest
> [ERROR] testCreateSaslNegotiator(org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest) Time elapsed: 0.095 s <<< ERROR!
> java.security.PrivilegedActionException
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
> Caused by: javax.security.sasl.SaslException: GSS initiate failed
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
> Caused by: org.ietf.jgss.GSSException: No valid credentials provided (Mechanism level: Server not found in Kerberos database (7) - Server not found in Kerberos database)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
> Caused by: sun.security.krb5.KrbException: Server not found in Kerberos database (7) - Server not found in Kerberos database
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137)
> Caused by: sun.security.krb5.Asn1Exception: Identifier doesn't match expected value (906)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.lambda$performNegotiation$0(KerberosAuthenticationManagerTest.java:245)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.performNegotiation(KerberosAuthenticationManagerTest.java:242)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.authenticate(KerberosAuthenticationManagerTest.java:212)
> at org.apache.qpid.server.security.auth.manager.KerberosAuthenticationManagerTest.testCreateSaslNegotiator(KerberosAuthenticationManagerTest.java:137
> {noformat}
> The Apache kerby embedded kerberos server {{SimpleKdcServer}} is used in the failing tests. What is interesting that kerberos integration tests where ApacheDS Kerberos Server is used have never been seen failing sporadically (See {{SimpleLDAPAuthenticationManagerTest}}). Potentially, a switch from Kerby to ApacheDS Kerberos Server should solve the issue. Though, the original Kerby sources have been extracted from ApacheDS Kerberos Server implementation. The failures could be caused by configuration issue.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org