[HADOOP-15123] KDiag tries to load krb5.conf from KRB5CCNAME instead of KRB5_CONFIG

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.8.0, 2.9.0, 3.0.0
• Fix Version/s: 3.1.0, 2.10.0, 3.0.1
• Component/s: security
• Assignee: Vipin Rathor
• Reporter: Vipin Rathor
• Created: 16/Dec/17 04:49
• Updated: 18/Jan/18 12:55
• Resolved: 18/Dec/17 18:51

Description

If Kerberos credential cache file location is overridden in environment, then KDiag tries to read its value for Kerberos configuration. For example,

# export KRB5CCNAME=/tmp/krb5cc_1001
# hadoop org.apache.hadoop.security.KDiag
...
...
== Locating Kerberos configuration file ==

Setting kerberos path from environment variable KRB5CCNAME: "/tmp/krb5cc_1001"
Kerberos configuration file = /tmp/krb5cc_1001
17/12/16 04:06:19 ERROR security.KDiag: java.util.UnknownFormatConversionException: Conversion = '�'
java.util.UnknownFormatConversionException: Conversion = '�'

Expected Behavior:
1. Kerberos configuration file location should be read from KRB5_CONFIG env. variable instead of KRB5CCNAME. Source: MIT KRB5 doc

Issue Links

• relates to: HADOOP-12426 Add Entry point for Kerberos health check