You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by Colm O hEigeartaigh <co...@apache.org> on 2015/10/26 14:09:30 UTC

Trunk broken?

Is trunk broken at the moment? I get the following errors in kerberos-test:

Failed tests:
  SaslGssapiBindITest.testSaslGssapiBind:166 Should not have caught
exception:  GSSAPIjavax.security.sasl.SaslException: GSS initiate failed
[Caused by GSSException: No valid credentials provided (Mechanism level:
Server not found in Kerberos database (7) - Server not found in Kerberos
database)]
Tests in error:

KerberosKRBProtocolTest.testObtainTickets_AES128_TCP:76->AbstractKerberosITest.testObtainTickets:123
» GSS

KerberosKRBProtocolTest.testObtainTickets_AES128_UDP:85->AbstractKerberosITest.testObtainTickets:123
» GSS

KerberosTcpITest.testObtainTickets_AES128:126->AbstractKerberosITest.testObtainTickets:123
» GSS

KerberosTcpITest.testObtainTickets_DES3_CBC_SHA1_KD:105->AbstractKerberosITest.testObtainTickets:123
» GSS

KerberosTcpITest.testObtainTickets_DES_CBC_MD5:95->AbstractKerberosITest.testObtainTickets:123
» GSS

KerberosUdpITest.testObtainTickets_AES128:125->AbstractKerberosITest.testObtainTickets:123
» GSS

KerberosUdpITest.testObtainTickets_DES3_CBC_SHA1_KD:104->AbstractKerberosITest.testObtainTickets:123
» GSS

KerberosUdpITest.testObtainTickets_DES_CBC_MD5:94->AbstractKerberosITest.testObtainTickets:123
» GSS

Colm.


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: Trunk broken?

Posted by Emmanuel Lécharny <el...@gmail.com>.
Le 27/10/15 11:14, Colm O hEigeartaigh a écrit :
> Thanks Stefan! My hostname is already in /etc/hosts matching "127.0.1.1".
> What else am I missing?

Works for me (on my MBP, Java 1.8.0-65)

Here is my /etc/hosts :

127.0.0.1       localhost,EXAMPLE.COM

Not sure EXAMPLE.COM is useful...


Re: Trunk broken?

Posted by Colm O hEigeartaigh <co...@apache.org>.
Thanks Stefan, all is working fine now.

Colm.

On Sat, Nov 7, 2015 at 8:33 AM, Stefan Seelmann <ma...@stefan-seelmann.de>
wrote:

> On 11/06/2015 10:40 AM, Colm O hEigeartaigh wrote:
> > Stefan, do you want me to take care of this change to KerberosTestUtils?
>
> Hi Colm, I commited the change here:
> http://svn.apache.org/viewvc?rev=1713092&view=rev
>
> I run the build on Jenkins and it worked fine.
>
> @all: Please also check if the ApacheDS build, and in particular the
> kerberos related tests, still work on your environment.
>
> Kind Regards,
> Stefan
>
>


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: Trunk broken?

Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
On 11/06/2015 10:40 AM, Colm O hEigeartaigh wrote:
> Stefan, do you want me to take care of this change to KerberosTestUtils?

Hi Colm, I commited the change here:
http://svn.apache.org/viewvc?rev=1713092&view=rev

I run the build on Jenkins and it worked fine.

@all: Please also check if the ApacheDS build, and in particular the
kerberos related tests, still work on your environment.

Kind Regards,
Stefan


Re: Trunk broken?

Posted by Colm O hEigeartaigh <co...@apache.org>.
Stefan, do you want me to take care of this change to KerberosTestUtils?

Colm.

On Mon, Nov 2, 2015 at 12:28 PM, Colm O hEigeartaigh <co...@apache.org>
wrote:

> Hi Stefan,
>
> I've managed to get the tests passing with the change you suggested
> (getCanonicalHostName()). It works when I modify my /etc/hosts so that both
> "localhost" and my machine name have the same IP address (previously the
> latter had 127.0.1.1):
>
> 127.0.0.1       localhost
> 127.0.1.1       colm-Precision-M4800
>
> If they both map to 127.0.0.1 and only if the change is made to use
> getCanonicalHostName() then the tests work. So I think we should update the
> KerberosTestUtils to make this change.
>
> Colm.
>
> On Tue, Oct 27, 2015 at 9:53 PM, Stefan Seelmann <ma...@stefan-seelmann.de>
> wrote:
>
>> On 10/27/2015 11:14 AM, Colm O hEigeartaigh wrote:
>> > Thanks Stefan! My hostname is already in /etc/hosts matching
>> "127.0.1.1".
>> > What else am I missing?
>>
>> I played a bit with my /etc/hosts and found a setting where I can
>> reproduce the test failure:
>>
>> $ cat /etc/hosts
>> 127.0.1.1       t430.localdomain t430
>> $ hostname -f
>> t430.localdomain
>> $ hostname -s
>> t430
>> $ hostname -i
>> 127.0.1.1
>>
>> Note that the FQDN and short host name differ.
>>
>>
>> The following change then fixed it for me, can you please also try this
>> change on your machine?
>>
>> Index:
>>
>> src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
>> ===================================================================
>> ---
>>
>> src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
>>       (revision 1710685)
>> +++
>>
>> src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
>>       (working copy)
>> @@ -256,7 +256,7 @@
>>          try
>>          {
>>              InetAddress loopback = InetAddress.getLocalHost();
>> -            hostName = loopback.getHostName();
>> +            hostName = loopback.getCanonicalHostName();
>>          }
>>          catch ( UnknownHostException e )
>>          {
>>
>>
>>
>
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: Trunk broken?

Posted by Colm O hEigeartaigh <co...@apache.org>.
Hi Stefan,

I've managed to get the tests passing with the change you suggested
(getCanonicalHostName()). It works when I modify my /etc/hosts so that both
"localhost" and my machine name have the same IP address (previously the
latter had 127.0.1.1):

127.0.0.1       localhost
127.0.1.1       colm-Precision-M4800

If they both map to 127.0.0.1 and only if the change is made to use
getCanonicalHostName() then the tests work. So I think we should update the
KerberosTestUtils to make this change.

Colm.

On Tue, Oct 27, 2015 at 9:53 PM, Stefan Seelmann <ma...@stefan-seelmann.de>
wrote:

> On 10/27/2015 11:14 AM, Colm O hEigeartaigh wrote:
> > Thanks Stefan! My hostname is already in /etc/hosts matching "127.0.1.1".
> > What else am I missing?
>
> I played a bit with my /etc/hosts and found a setting where I can
> reproduce the test failure:
>
> $ cat /etc/hosts
> 127.0.1.1       t430.localdomain t430
> $ hostname -f
> t430.localdomain
> $ hostname -s
> t430
> $ hostname -i
> 127.0.1.1
>
> Note that the FQDN and short host name differ.
>
>
> The following change then fixed it for me, can you please also try this
> change on your machine?
>
> Index:
>
> src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
> ===================================================================
> ---
>
> src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
>       (revision 1710685)
> +++
>
> src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
>       (working copy)
> @@ -256,7 +256,7 @@
>          try
>          {
>              InetAddress loopback = InetAddress.getLocalHost();
> -            hostName = loopback.getHostName();
> +            hostName = loopback.getCanonicalHostName();
>          }
>          catch ( UnknownHostException e )
>          {
>
>
>


-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: Trunk broken?

Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
On 10/27/2015 11:14 AM, Colm O hEigeartaigh wrote:
> Thanks Stefan! My hostname is already in /etc/hosts matching "127.0.1.1".
> What else am I missing?

I played a bit with my /etc/hosts and found a setting where I can
reproduce the test failure:

$ cat /etc/hosts
127.0.1.1       t430.localdomain t430
$ hostname -f
t430.localdomain
$ hostname -s
t430
$ hostname -i
127.0.1.1

Note that the FQDN and short host name differ.


The following change then fixed it for me, can you please also try this
change on your machine?

Index:
src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
===================================================================
---
src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
      (revision 1710685)
+++
src/test/java/org/apache/directory/server/kerberos/kdc/KerberosTestUtils.java
      (working copy)
@@ -256,7 +256,7 @@
         try
         {
             InetAddress loopback = InetAddress.getLocalHost();
-            hostName = loopback.getHostName();
+            hostName = loopback.getCanonicalHostName();
         }
         catch ( UnknownHostException e )
         {



Re: Trunk broken?

Posted by Colm O hEigeartaigh <co...@apache.org>.
Thanks Stefan! My hostname is already in /etc/hosts matching "127.0.1.1".
What else am I missing?

Colm.

On Mon, Oct 26, 2015 at 10:19 PM, Stefan Seelmann <ma...@stefan-seelmann.de>
wrote:

> Hi Colm,
>
> On 10/26/2015 02:09 PM, Colm O hEigeartaigh wrote:
> > Is trunk broken at the moment? I get the following errors in
> kerberos-test:
>
> works on my machine and on Jenkins.
>
> I guess it is due to recent changes of hardcoded use of "localhost" to
> InetAddress.getLocalHost().getHostName(). Please check your /etc/hosts,
> see also Lukas' mail [1].
>
> Kind Regards,
> Stefan
>
>
> [1]
>
> https://mail-archives.apache.org/mod_mbox/directory-dev/201510.mbox/%3CCAEDoG7A6msfCY7ur71AT93u4zwNcJUV2cQsPt7N9Lm0%2BUz_6Xw%40mail.gmail.com%3E
>
> > Failed tests:
> >   SaslGssapiBindITest.testSaslGssapiBind:166 Should not have caught
> > exception:  GSSAPIjavax.security.sasl.SaslException: GSS initiate failed
> > [Caused by GSSException: No valid credentials provided (Mechanism level:
> > Server not found in Kerberos database (7) - Server not found in Kerberos
> > database)]
> > Tests in error:
> >
> >
> KerberosKRBProtocolTest.testObtainTickets_AES128_TCP:76->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> >
> KerberosKRBProtocolTest.testObtainTickets_AES128_UDP:85->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> >
> KerberosTcpITest.testObtainTickets_AES128:126->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> >
> KerberosTcpITest.testObtainTickets_DES3_CBC_SHA1_KD:105->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> >
> KerberosTcpITest.testObtainTickets_DES_CBC_MD5:95->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> >
> KerberosUdpITest.testObtainTickets_AES128:125->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> >
> KerberosUdpITest.testObtainTickets_DES3_CBC_SHA1_KD:104->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> >
> KerberosUdpITest.testObtainTickets_DES_CBC_MD5:94->AbstractKerberosITest.testObtainTickets:123
> > » GSS
> >
> > Colm.
> >
> >
>
> --
> Colm O hEigeartaigh
>
> Talend Community Coder
> http://coders.talend.com
>
>

Re: Trunk broken?

Posted by Stefan Seelmann <ma...@stefan-seelmann.de>.
Hi Colm,

On 10/26/2015 02:09 PM, Colm O hEigeartaigh wrote:
> Is trunk broken at the moment? I get the following errors in kerberos-test:

works on my machine and on Jenkins.

I guess it is due to recent changes of hardcoded use of "localhost" to
InetAddress.getLocalHost().getHostName(). Please check your /etc/hosts,
see also Lukas' mail [1].

Kind Regards,
Stefan


[1]
https://mail-archives.apache.org/mod_mbox/directory-dev/201510.mbox/%3CCAEDoG7A6msfCY7ur71AT93u4zwNcJUV2cQsPt7N9Lm0%2BUz_6Xw%40mail.gmail.com%3E

> Failed tests:
>   SaslGssapiBindITest.testSaslGssapiBind:166 Should not have caught
> exception:  GSSAPIjavax.security.sasl.SaslException: GSS initiate failed
> [Caused by GSSException: No valid credentials provided (Mechanism level:
> Server not found in Kerberos database (7) - Server not found in Kerberos
> database)]
> Tests in error:
> 
> KerberosKRBProtocolTest.testObtainTickets_AES128_TCP:76->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> KerberosKRBProtocolTest.testObtainTickets_AES128_UDP:85->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> KerberosTcpITest.testObtainTickets_AES128:126->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> KerberosTcpITest.testObtainTickets_DES3_CBC_SHA1_KD:105->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> KerberosTcpITest.testObtainTickets_DES_CBC_MD5:95->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> KerberosUdpITest.testObtainTickets_AES128:125->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> KerberosUdpITest.testObtainTickets_DES3_CBC_SHA1_KD:104->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> KerberosUdpITest.testObtainTickets_DES_CBC_MD5:94->AbstractKerberosITest.testObtainTickets:123
> » GSS
> 
> Colm.
> 
>