Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-16231

Integration tests should support client keytab login for secure clusters

    Details

    • Type: Improvement
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.3.0, 2.0.0
    • Component/s: integration tests
    • Labels:
      None
    • Release Note:
      Hide
      Prior to this change, the integration test clients (IntegrationTest*) relied on the Kerberos credential cache for authentication against secured clusters. This could lead to the tests failing due to authentication failures when the tickets in the credential cache expired. With this change, the integration test clients will make use of the configuration properties for "hbase.client.keytab.file" and "hbase.client.kerberos.principal" (They are required). This will perform a login from the configured keytab file and automatically refresh the credentials in the background for the process lifetime.
      Show
      Prior to this change, the integration test clients (IntegrationTest*) relied on the Kerberos credential cache for authentication against secured clusters. This could lead to the tests failing due to authentication failures when the tickets in the credential cache expired. With this change, the integration test clients will make use of the configuration properties for "hbase.client.keytab.file" and "hbase.client.kerberos.principal" (They are required). This will perform a login from the configured keytab file and automatically refresh the credentials in the background for the process lifetime.

      Description

      Integration tests currently rely on an external kerberos login for secure clusters. Elsewhere we use AuthUtil to login and refresh the credentials in a background thread. We should do the same here.

        Attachments

          Activity

            People

            • Assignee:
              ghelmling Gary Helmling
              Reporter:
              ghelmling Gary Helmling
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: