[KUDU-2989] SASL server fails when FQDN is greater than 63 characters long

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.10.0, 1.11.0
• Fix Version/s: 1.12.0, 1.11.1
• Component/s: rpc, security
• Target Version/s: 1.12.0
• Assignee: Unassigned
• Reporter: Todd Lipcon
• Created: 01/Nov/19 05:11
• Updated: 12/Nov/19 19:12
• Resolved: 12/Nov/19 19:12

Description

Currently, on the server side, Kudu doesn't explicitly pass the host's FQDN into the SASL library. Due to an upstream SASL bug (https://github.com/cyrusimap/cyrus-sasl/issues/583) the FQDN gets truncated when trying to determine the server's principal, in the case that the server's fQDN is longer than 64 characters.

This results in startup failures where the preflight checks fail due to not finding the appropriate keytab entry (after searching for a truncated host name)

To work around this, we should use our own code to compute the FQDN.