[KUDU-1941] Server should refuse to start if authentication is 'required' but no auth method is configured

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0
• Fix Version/s: 1.4.0
• Component/s: rpc, security
• Labels: usability
• Target Version/s: 1.4.0
• Code Review: https://gerrit.cloudera.org/#/c/6851/
• Assignee: Alexey Serbin
• Reporter: Todd Lipcon
• Created: 16/Mar/17 15:18
• Updated: 11/May/17 01:40
• Resolved: 11/May/17 01:40

Description

I started a server with --rpc_authentication=required, but didn't specify a keytab. The server started, but when I try to connect to it, the server abruptly disconnects the client (so the client gets a network error and retries). The server spews the log:

0316 08:16:36.271464 (+    39us) negotiation.cc:281] Negotiation complete: Invalid argument: Server connection negotiation failed: server connection from 127.0.0.1:55920: RPC authentication (--rpc_authentication) may not be required unless Kerberos (--keytab_file) or external PKI (--rpc_certificate_file et al) are configured