[SOLR-15366] SaslZkACLProviderTest.testSaslZkACLProvider fails

• Type: Test
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Tests
• Assignee: Unassigned
• Reporter: Mike Drob
• Created: 22/Apr/21 19:58
• Updated: 05/Oct/23 01:13

Description

This reproduces pretty consistently on Jenkins on main branch, but not on my local machine.

601580 ERROR (NIOServerCxnFactory.SelectorThread-0) [     ] o.a.z.s.ZooKeeperSaslServer Zookeeper Server failed to create a SaslServer to interact with a client during session initiation
          => javax.security.sasl.SaslException: Failure to initialize security context [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos credentials)]
	at jdk.security.jgss/com.sun.security.sasl.gsskerb.GssKrb5Server.<init>(GssKrb5Server.java:125)
javax.security.sasl.SaslException: Failure to initialize security context
	at com.sun.security.sasl.gsskerb.GssKrb5Server.<init>(GssKrb5Server.java:125) ~[?:?]
	at com.sun.security.sasl.gsskerb.FactoryImpl.createSaslServer(FactoryImpl.java:85) ~[?:?]
	at javax.security.sasl.Sasl.createSaslServer(Sasl.java:580) ~[?:?]
	at org.apache.zookeeper.util.SecurityUtils$2.run(SecurityUtils.java:227) [zookeeper-3.6.2.jar:3.6.2]
	at org.apache.zookeeper.util.SecurityUtils$2.run(SecurityUtils.java:223) [zookeeper-3.6.2.jar:3.6.2]
	at java.security.AccessController.doPrivileged(Native Method) [?:?]
	at javax.security.auth.Subject.doAs(Subject.java:423) [?:?]
	at org.apache.zookeeper.util.SecurityUtils.createSaslServer(SecurityUtils.java:223) [zookeeper-3.6.2.jar:3.6.2]
	at org.apache.zookeeper.server.ZooKeeperSaslServer.createSaslServer(ZooKeeperSaslServer.java:44) [zookeeper-3.6.2.jar:3.6.2]
	at org.apache.zookeeper.server.ZooKeeperSaslServer.<init>(ZooKeeperSaslServer.java:38) [zookeeper-3.6.2.jar:3.6.2]
	at org.apache.zookeeper.server.NIOServerCnxn.<init>(NIOServerCnxn.java:91) [zookeeper-3.6.2.jar:3.6.2]
	at org.apache.zookeeper.server.NIOServerCnxnFactory.createConnection(NIOServerCnxnFactory.java:837) [zookeeper-3.6.2.jar:3.6.2]
	at org.apache.zookeeper.server.NIOServerCnxnFactory$SelectorThread.processAcceptedConnections(NIOServerCnxnFactory.java:469) [zookeeper-3.6.2.jar:3.6.2]
	at org.apache.zookeeper.server.NIOServerCnxnFactory$SelectorThread.run(NIOServerCnxnFactory.java:383) [zookeeper-3.6.2.jar:3.6.2]
Caused by: org.ietf.jgss.GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos credentials)
	at sun.security.jgss.krb5.Krb5AcceptCredential.getInstance(Krb5AcceptCredential.java:87) ~[?:?]
	at sun.security.jgss.krb5.Krb5MechFactory.getCredentialElement(Krb5MechFactory.java:133) ~[?:?]
	at sun.security.jgss.GSSManagerImpl.getCredentialElement(GSSManagerImpl.java:187) ~[?:?]
	at sun.security.jgss.GSSCredentialImpl.add(GSSCredentialImpl.java:439) ~[?:?]
	at sun.security.jgss.GSSCredentialImpl.<init>(GSSCredentialImpl.java:74) ~[?:?]
	at sun.security.jgss.GSSManagerImpl.createCredential(GSSManagerImpl.java:148) ~[?:?]
	at com.sun.security.sasl.gsskerb.GssKrb5Server.<init>(GssKrb5Server.java:108) ~[?:?]
	... 13 more

Issue Links

• is related to: SOLR-17013 SaslZkACLProviderTestMethod.testSaslZkACLProvider fails consistently on MAcOSX -- evidently due to SocketPermission
• relates to: SOLR-15249 Zookeeper ACL on /security.json