[HBASE-7781] Update security unit tests to use a KDC if available

• Type: Umbrella
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Fix Version/s: 1.1.0, 2.0.0
• Component/s: security, test
• Assignee: Duo Zhang
• Reporter: Gary Helmling
• Created: 06/Feb/13 19:49
• Updated: 03/Apr/18 19:23
• Resolved: 17/Mar/15 00:38

Description

We currently have large holes in the test coverage of HBase with security enabled. Two recent examples of bugs which really should have been caught with testing are HBASE-7771 and HBASE-7772. The long standing problem with testing with security enabled has been the requirement for supporting kerberos infrastructure.

We need to close this gap and provide some automated testing with security enabled, if necessary standing up and provisioning a temporary KDC as an option for running integration tests, see HADOOP-8078 and HADOOP-9004 where a similar approach was taken.

Issue Links

• is related to: HADOOP-11686 MiniKDC cannot change ORG_NAME or ORG_DOMAIN
• is related to: HADOOP-9848 Create a MiniKDC for use with security testing

Sub-Tasks

• Update TestUsersOperationsWithSecureHadoop to use MiniKdc: Closed
• Test delegation token generation with kerberos enabled: Closed