Hadoop Common
  1. Hadoop Common
  2. HADOOP-6552

KEYTAB_KERBEROS_OPTIONS in UserGroupInformation should have options for automatic renewal of keytab based tickets

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 0.22.0
    • Fix Version/s: 0.21.0
    • Component/s: security
    • Labels:
      None
    • Hadoop Flags:
      Reviewed

      Description

      KEYTAB_KERBEROS_OPTIONS in UserGroupInformation should have options for automatic renewal of keytab based tickets. Specifically, renewTGT=true (and useTicketCache=true), as documented in http://java.sun.com/javase/6/docs/jre/api/security/jaas/spec/com/sun/security/auth/module/Krb5LoginModule.html

      1. 6552.patch
        0.8 kB
        Devaraj Das
      2. 6552.patch
        0.7 kB
        Devaraj Das

        Activity

        Devaraj Das created issue -
        Hide
        Devaraj Das added a comment -

        Straightforward patch

        Show
        Devaraj Das added a comment - Straightforward patch
        Devaraj Das made changes -
        Field Original Value New Value
        Attachment 6552.patch [ 12435350 ]
        Devaraj Das made changes -
        Status Open [ 1 ] Patch Available [ 10002 ]
        Hide
        Hadoop QA added a comment -

        -1 overall. Here are the results of testing the latest attachment
        http://issues.apache.org/jira/secure/attachment/12435350/6552.patch
        against trunk revision 907956.

        +1 @author. The patch does not contain any @author tags.

        -1 tests included. The patch doesn't appear to include any new or modified tests.
        Please justify why no new tests are needed for this patch.
        Also please list what manual steps were performed to verify this patch.

        +1 javadoc. The javadoc tool did not generate any warning messages.

        +1 javac. The applied patch does not increase the total number of javac compiler warnings.

        +1 findbugs. The patch does not introduce any new Findbugs warnings.

        +1 release audit. The applied patch does not increase the total number of release audit warnings.

        +1 core tests. The patch passed core unit tests.

        +1 contrib tests. The patch passed contrib unit tests.

        Test results: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/testReport/
        Findbugs warnings: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/artifact/trunk/build/test/findbugs/newPatchFindbugsWarnings.html
        Checkstyle results: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/artifact/trunk/build/test/checkstyle-errors.html
        Console output: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/console

        This message is automatically generated.

        Show
        Hadoop QA added a comment - -1 overall. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12435350/6552.patch against trunk revision 907956. +1 @author. The patch does not contain any @author tags. -1 tests included. The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. +1 javadoc. The javadoc tool did not generate any warning messages. +1 javac. The applied patch does not increase the total number of javac compiler warnings. +1 findbugs. The patch does not introduce any new Findbugs warnings. +1 release audit. The applied patch does not increase the total number of release audit warnings. +1 core tests. The patch passed core unit tests. +1 contrib tests. The patch passed contrib unit tests. Test results: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/testReport/ Findbugs warnings: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/artifact/trunk/build/test/findbugs/newPatchFindbugsWarnings.html Checkstyle results: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/artifact/trunk/build/test/checkstyle-errors.html Console output: http://hudson.zones.apache.org/hudson/job/Hadoop-Patch-h4.grid.sp2.yahoo.net/351/console This message is automatically generated.
        Hide
        Devaraj Das added a comment -

        No tests on this since it is just passing some new options to the kerberos login module..

        Show
        Devaraj Das added a comment - No tests on this since it is just passing some new options to the kerberos login module..
        Hide
        Devaraj Das added a comment -

        Patch for Y20. Not for commit here.

        Show
        Devaraj Das added a comment - Patch for Y20. Not for commit here.
        Devaraj Das made changes -
        Attachment 6552.patch [ 12435369 ]
        Hide
        Owen O'Malley added a comment -

        +1

        Show
        Owen O'Malley added a comment - +1
        Owen O'Malley made changes -
        Hadoop Flags [Reviewed]
        Hide
        Devaraj Das added a comment -

        I just committed this.

        Show
        Devaraj Das added a comment - I just committed this.
        Devaraj Das made changes -
        Resolution Fixed [ 1 ]
        Status Patch Available [ 10002 ] Resolved [ 5 ]
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-trunk-Commit #161 (See http://hudson.zones.apache.org/hudson/job/Hadoop-Common-trunk-Commit/161/)
        . Puts renewTGT=true and useTicketCache=true for the keytab kerberos options. Contributed by Devaraj Das.

        Show
        Hudson added a comment - Integrated in Hadoop-Common-trunk-Commit #161 (See http://hudson.zones.apache.org/hudson/job/Hadoop-Common-trunk-Commit/161/ ) . Puts renewTGT=true and useTicketCache=true for the keytab kerberos options. Contributed by Devaraj Das.
        Hide
        Hudson added a comment -

        Integrated in Hadoop-Common-trunk #245 (See http://hudson.zones.apache.org/hudson/job/Hadoop-Common-trunk/245/)
        . Puts renewTGT=true and useTicketCache=true for the keytab kerberos options. Contributed by Devaraj Das.

        Show
        Hudson added a comment - Integrated in Hadoop-Common-trunk #245 (See http://hudson.zones.apache.org/hudson/job/Hadoop-Common-trunk/245/ ) . Puts renewTGT=true and useTicketCache=true for the keytab kerberos options. Contributed by Devaraj Das.
        Tom White made changes -
        Fix Version/s 0.21.0 [ 12313563 ]
        Fix Version/s 0.22.0 [ 12314296 ]
        Tom White made changes -
        Status Resolved [ 5 ] Closed [ 6 ]

          People

          • Assignee:
            Devaraj Das
            Reporter:
            Devaraj Das
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development