You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@atlas.apache.org by "Vimal Sharma (JIRA)" <ji...@apache.org> on 2016/11/30 12:09:58 UTC

[jira] [Commented] (ATLAS-1340) Credential Provider utility does not work with fully qualified local/HDFS jceks path

    [ https://issues.apache.org/jira/browse/ATLAS-1340?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15708401#comment-15708401 ] 

Vimal Sharma commented on ATLAS-1340:
-------------------------------------

Integration tests in CredentialProviderUtilityIT are failing with this patch:

Tests run: 4, Failures: 4, Errors: 0, Skipped: 0, Time elapsed: 0.547 sec <<< FAILURE! - in org.apache.atlas.CredentialProviderUtilityIT
testEnterEmptyValues(org.apache.atlas.CredentialProviderUtilityIT)  Time elapsed: 0.271 sec  <<< FAILURE!
java.io.IOException: No CredentialProviderFactory for /var/folders/96/j44w9z7d6g78llqcyv5_6jj80000gp/T/tempproviders7798648075874736001/test.jks in hadoop.security.credential.provider.path
	at org.apache.atlas.CredentialProviderUtilityIT.testEnterEmptyValues(CredentialProviderUtilityIT.java:131)

testEnterMismatchedValues(org.apache.atlas.CredentialProviderUtilityIT)  Time elapsed: 0.001 sec  <<< FAILURE!
java.io.IOException: No CredentialProviderFactory for /var/folders/96/j44w9z7d6g78llqcyv5_6jj80000gp/T/tempproviders6272433012975323657/test.jks in hadoop.security.credential.provider.path
	at org.apache.atlas.CredentialProviderUtilityIT.testEnterMismatchedValues(CredentialProviderUtilityIT.java:185)

testEnterValidValues(org.apache.atlas.CredentialProviderUtilityIT)  Time elapsed: 0.001 sec  <<< FAILURE!
java.io.IOException: No CredentialProviderFactory for /var/folders/96/j44w9z7d6g78llqcyv5_6jj80000gp/T/tempproviders5999902898944984490/test.jks in hadoop.security.credential.provider.path
	at org.apache.atlas.CredentialProviderUtilityIT.testEnterValidValues(CredentialProviderUtilityIT.java:69)

testOverwriteValues(org.apache.atlas.CredentialProviderUtilityIT)  Time elapsed: 0.002 sec  <<< FAILURE!
java.io.IOException: No CredentialProviderFactory for /var/folders/96/j44w9z7d6g78llqcyv5_6jj80000gp/T/tempproviders898796476766539793/test.jks in hadoop.security.credential.provider.path
	at org.apache.atlas.CredentialProviderUtilityIT.testOverwriteValues(CredentialProviderUtilityIT.java:229)


Can you please fix these tests. Please submit the patch as ATLAS-{BUG_NO}-{VERSION}.patch

> Credential Provider utility does not work with fully qualified local/HDFS jceks path
> ------------------------------------------------------------------------------------
>
>                 Key: ATLAS-1340
>                 URL: https://issues.apache.org/jira/browse/ATLAS-1340
>             Project: Atlas
>          Issue Type: Bug
>    Affects Versions: trunk
>            Reporter: Vipin Rathor
>            Priority: Minor
>              Labels: patch, security
>         Attachments: fix-hdfs-credProvider.patch
>
>
> At present the Atlas Credential Provider utility (./bin/cputil.py) does not work with credential provider path like jceks://file/local/file/path/file.jceks or jceks://hdfs@namenodehost:port/path/in/hdfs/to/file.jceks as mentioned in documentation page at http://atlas.apache.org/Security.html (section: Credential Provider Utility Script)
> Current Behavior:
> cputil.py always creates a credential provider file in local file system at root directory as follows:
> 1. For the input "jceks://file/local/file/path/file.jceks",
> file created => /jceks:/file/local/file/path/file.jceks
> 2. For the input "jceks://hdfs@namenode.com:8020/path/in/hdfs/to/file.jceks",
> file created => /jceks:/hdfs@namenode.com:8020/path/in/hdfs/to/file.jceks on local file system
> Expected Behavior:
> 1. For the input "jceks://file/local/file/path/file.jceks",
> file created should be /local/file/path/file.jceks
> 2. For the input "jceks://hdfs@namenode.com:8020/path/in/hdfs/to/file.jceks",
> file created should be /path/in/hdfs/to/file.jceks on the specified HDFS file system.
> Steps to re-create:
> 1. Run ./bin/cputil.py and provide fully qualified path to jceks file as described above.
> Attached is a patch to fix this issue. Tested with both local and HDFS jceks credential provider path.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)