You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "Tim Armstrong (Jira)" <ji...@apache.org> on 2020/12/22 21:14:00 UTC

[jira] [Updated] (IMPALA-6494) thrift-server-test:KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity fails when built with dynamic linking

     [ https://issues.apache.org/jira/browse/IMPALA-6494?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Tim Armstrong updated IMPALA-6494:
----------------------------------
    Component/s: Infrastructure

> thrift-server-test:KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity fails when built with dynamic linking
> --------------------------------------------------------------------------------------------------------------------
>
>                 Key: IMPALA-6494
>                 URL: https://issues.apache.org/jira/browse/IMPALA-6494
>             Project: IMPALA
>          Issue Type: Bug
>          Components: Infrastructure
>            Reporter: Philip Martin
>            Assignee: Sailesh Mukil
>            Priority: Major
>
> On my Ubuntu16.04 environment, as well as in Ubuntu16.04 docker images (for me and some others), I see the following failure:
> {code}
> [ RUN      ] KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/1
> Loading random data
> Initializing database 'efa3-6f2c-c195-a12c/krb5kdc/principal' for realm 'KRBTEST.COM',
> master key name 'K/M@KRBTEST.COM'
> Couldn't open log file /dev/stderr: Permission denied
> krb5kdc: starting...
> WARNING: no policy specified for impala/localhost@KRBTEST.COM; defaulting to no policy
> Authenticating as principal impdev/admin@KRBTEST.COM with password.
> Principal "impala/localhost@KRBTEST.COM" created.
> Authenticating as principal impdev/admin@KRBTEST.COM with password.
> Entry for principal impala/localhost with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:efa3-6f2c-c195-a12c/krb5kdc/impala_localhost.keytab.
> Entry for principal impala/localhost with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:efa3-6f2c-c195-a12c/krb5kdc/impala_localhost.keytab.
> Entry for principal impala/localhost with kvno 2, encryption type des3-cbc-sha1 added to keytab WRFILE:efa3-6f2c-c195-a12c/krb5kdc/impala_localhost.keytab.
> Entry for principal impala/localhost with kvno 2, encryption type arcfour-hmac added to keytab WRFILE:efa3-6f2c-c195-a12c/krb5kdc/impala_localhost.keytab.
> /home/impdev/Impala/be/src/rpc/thrift-server-test.cc:153: Failure
> Value of: status_.ok()
>   Actual: false
> Expected: true
> Error: Couldn't open transport for localhost:60130 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server krbtgt/localhost@KRBTEST.COM not found in Kerberos database))
> [  FAILED  ] KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/1, where GetParam() = 1 (1007 ms)
> [ RUN      ] KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/2
> Loading random data
> Initializing database 'bdc2-24e1-6d9e-58df/krb5kdc/principal' for realm 'KRBTEST.COM',
> master key name 'K/M@KRBTEST.COM'
> Couldn't open log file /dev/stderr: Permission denied
> krb5kdc: starting...
> WARNING: no policy specified for impala/localhost@KRBTEST.COM; defaulting to no policy
> Authenticating as principal impdev/admin@KRBTEST.COM with password.
> Principal "impala/localhost@KRBTEST.COM" created.
> Authenticating as principal impdev/admin@KRBTEST.COM with password.
> Entry for principal impala/localhost with kvno 2, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:bdc2-24e1-6d9e-58df/krb5kdc/impala_localhost.keytab.
> Entry for principal impala/localhost with kvno 2, encryption type aes128-cts-hmac-sha1-96 added to keytab WRFILE:bdc2-24e1-6d9e-58df/krb5kdc/impala_localhost.keytab.
> Entry for principal impala/localhost with kvno 2, encryption type des3-cbc-sha1 added to keytab WRFILE:bdc2-24e1-6d9e-58df/krb5kdc/impala_localhost.keytab.
> Entry for principal impala/localhost with kvno 2, encryption type arcfour-hmac added to keytab WRFILE:bdc2-24e1-6d9e-58df/krb5kdc/impala_localhost.keytab.
> /home/impdev/Impala/be/src/rpc/thrift-server-test.cc:153: Failure
> Value of: status_.ok()
>   Actual: false
> Expected: true
> Error: Couldn't open transport for localhost:49271 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Server krbtgt/localhost@KRBTEST.COM not found in Kerberos database))
> [  FAILED  ] KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/2, where GetParam() = 2 (1023 ms)
> [----------] 3 tests from KerberosOnAndOff/ThriftKerberizedParamsTest (2049 ms total)
> [----------] Global test environment tear-down
> [==========] 17 tests from 6 test cases ran. (2725 ms total)
> [  PASSED  ] 15 tests.
> [  FAILED  ] 2 tests, listed below:
> [  FAILED  ] KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/1, where GetParam() = 1
> [  FAILED  ] KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/2, where GetParam() = 2
>  2 FAILED TESTS
>   YOU HAVE 1 DISABLED TEST
> {code}
> I can reproduce it reliably with the following slow command that builds in a Docker container and runs thrift-server-test.
> {code}
> docker run --privileged ubuntu:16.04 bash -c "set -ex; apt-get update; apt-get install sudo git <<< Y; adduser --disabled-password --gecos '' impdev; echo 'impdev ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers; su - impdev -c 'git clone https://git-wip-us.apache.org/repos/asf/impala.git /home/impdev/Impala'; su - impdev -c /home/impdev/Impala/bin/bootstrap_system.sh; su - impdev -c 'cd /home/impdev/Impala; . bin/impala-config-local.sh; . bin/impala-config.sh; ./buildall.sh -skiptests -so; make -j$(nproc) thrift-server-test; be/build/debug/rpc/thrift-server-test'" |& tee out2.$(date +%s)
> {code}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org