[IMPALA-10340] Cannot set up KDC from scratch

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Impala 4.0.0
• Fix Version/s: Impala 4.0.0
• Component/s: Security
• Epic Color: ghx-label-4
• Assignee: Attila Doroszlai
• Reporter: Attila Doroszlai
• Created: 18/Nov/20 14:22
• Updated: 19/Nov/20 09:41
• Resolved: 19/Nov/20 09:41

Description

Running bin/kerberos/experimental-kerberos-setup.sh without existing mini cluster fails with the following error after it installs required packages:

bin/kerberos/experimental-kerberos-setup.sh: line 50: KRB5_CONFIG: unbound variable

experimental-kerberos-setup.sh sources impala-config.sh, which uses testdata/cluster/admin is_kerberized to check if the cluster is kerberized. If it is not, all variables exported by minikdc_env.sh including KRB5_CONFIG are unset. The problem is that this happens even if the cluster is not yet created.

However, kerberized cluster cannot be created (via create-test-configuration.sh) without installing KDC first, so this is catch 22.

Issue Links

• links to: Gerrit