[GitHub] [spark] gaborgsomogyi commented on issue #27877: [WIP][SPARK-30541] Implement KafkaDelegationTokenSuite with testRetry

[GitBox <gi...@apache.org>]

gaborgsomogyi commented on issue #27877: [WIP][SPARK-30541] Implement KafkaDelegationTokenSuite with testRetry
URL: https://github.com/apache/spark/pull/27877#issuecomment-597554402
 
 
   After local testing I've seen an interesting phenomenon. The first round of test executed properly and then the hardcoded `IllegalArgumentException` fired. Then `KDC` and Zookeeper server started properly but when `KafkaZkClient` must authenticate Kerberos is not doing a brand new authentication but found the `TGT` from the previous run (which is generated by the previous `KDC` and won't be accepted by the new):
   ```
   Found ticket for zookeeper/localhost@EXAMPLE.COM to go to krbtgt/EXAMPLE.COM@EXAMPLE.COM expiring on Thu Mar 12 02:53:17 PDT 2020
   Found ticket for zkclient/localhost@EXAMPLE.COM to go to krbtgt/EXAMPLE.COM@EXAMPLE.COM expiring on Thu Mar 12 02:53:02 PDT 2020
   ```
   See the 15 seconds timegap between the 2, `zookeeper` `TGT` just created but `zkclient` found in the JVM's shared state. Honestly not sure why only `zkclient` `TGT` found?!
   
   At the moment no idea how to reset this shared state and analysing the JVM source code. If somebody has idea then feel free to shed some lights...
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org