You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Vipin Rathor (JIRA)" <ji...@apache.org> on 2017/12/16 05:01:00 UTC

[jira] [Comment Edited] (HADOOP-15123) KDiag tries to load krb5.conf from KRB5CCNAME instead of KRB5_CONFIG

    [ https://issues.apache.org/jira/browse/HADOOP-15123?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16293655#comment-16293655 ] 

Vipin Rathor edited comment on HADOOP-15123 at 12/16/17 5:00 AM:
-----------------------------------------------------------------

Submitted a patch which fixes one more issue where KDiag is not able to print any krb5.conf line starting with hash (#).
Unit tests passing:
{code:java}
Running org.apache.hadoop.security.TestKDiag
Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 1.91 sec - in org.apache.hadoop.security.TestKDiag
Running org.apache.hadoop.security.TestKDiagNoKDC
Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.465 sec - in org.apache.hadoop.security.TestKDiagNoKDC
{code}

Performed manual testing to test the changes.


was (Author: vrathor-hw):
Submitted a patch which fixes one more issue where KDiag is not able to print any krb5.conf line starting with hash (#).

> KDiag tries to load krb5.conf from KRB5CCNAME instead of KRB5_CONFIG
> --------------------------------------------------------------------
>
>                 Key: HADOOP-15123
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15123
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 3.0.0
>            Reporter: Vipin Rathor
>            Priority: Minor
>         Attachments: HADOOP-15123.0001.patch
>
>
> If Kerberos credential cache file location is overridden in environment, then KDiag tries to read its value for Kerberos configuration. For example,
> {code:java}
> # export KRB5CCNAME=/tmp/krb5cc_1001
> # hadoop org.apache.hadoop.security.KDiag
> ...
> ...
> == Locating Kerberos configuration file ==
> Setting kerberos path from environment variable KRB5CCNAME: "/tmp/krb5cc_1001"
> Kerberos configuration file = /tmp/krb5cc_1001
> 17/12/16 04:06:19 ERROR security.KDiag: java.util.UnknownFormatConversionException: Conversion = '�'
> java.util.UnknownFormatConversionException: Conversion = '�'
> {code}
> Expected Behavior:
> 1. Kerberos configuration file location should be read from KRB5_CONFIG env. variable instead of KRB5CCNAME.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org