[OOZIE-2172] ZooKeeper Security Tests failed with JVM IBM JAVA

• Type: Test
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.1.0, 4.2.0
• Fix Version/s: 4.3.0
• Component/s: HA
• Labels: ibm-jdk jaas oozie patch security zookeeper

Environment

zookeeper-security-tests]# mvn -verion
Apache Maven 3.2.5 (12a6b3acb947671f09b81f49094c53f426d8cea1; 2014-12-14T12:29:23-05:00)
Maven home: /opt/apache-maven-3.2.5
Java version: 1.7.0, vendor: IBM Corporation
Java home: /usr/lib/jvm/ibm-java-x86_64-71-pxa6470_27sr2fp10-20141218_02/jre
Default locale: en_US, platform encoding: ISO-8859-1
OS name: "linux", version: "3.10.0-229.el7.x86_64", arch: "amd64", family: "unix"

• Assignee: Gaurav Pande
• Reporter: pascal oliva
• Created: 17/Mar/15 16:08
• Updated: 02/Dec/16 21:05
• Resolved: 02/Aug/16 20:28

Description

ZooKeeper Security Tests failed by using IBM JAVA

-------------------------------------------------------
Concurrency config is parallel='classes', perCoreThreadCount=false, threadCount=1, useUnlimitedThreads=false
Running org.apache.oozie.util.TestZKUtilsWithSecurity
Tests run: 2, Failures: 0, Errors: 2, Skipped: 0, Time elapsed: 36.493 sec <<< FAILURE!

Results :

Tests in error:
testCheckAndSetACLs(org.apache.oozie.util.TestZKUtilsWithSecurity): org.apache.hcatalog.common.HCatException : 9001 : Exception occurred while processing HCat request : MetaException while creating HMS client. Cause : MetaException(message:Could not connect to meta store using any of the URIs provided. Most recent failure: org.apache.thrift.transport.TTransportException: java.net.ConnectException: Connection refused(..)
testNewUsingACLs(org.apache.oozie.util.TestZKUtilsWithSecurity): Could not configure server because SASL configuration did not allow the ZooKeeper server to authenticate itself properly: javax.security.auth.login.LoginException: Bad JAAS configuration: unrecognized option: storeKey

..
Traces On target/./surefire-reports/org.apache.oozie.util.TestZKUtilsWithSecurity-output.txt

at com.google.common.cache.LocalCache$LocalManualCache$1.load(LocalCache.java:4767)
at com.google.common.cache.LocalCache$LoadingValueReference.loadFuture(LocalCache.java:3568)
at com.google.common.cache.LocalCache$Segment.loadSync(LocalCache.java:2350)
at com.google.common.cache.LocalCache$Segment.lockedGetOrLoad(LocalCache.java:2313)
at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2228)
at com.google.common.cache.LocalCache.get(LocalCache.java:3965)
at com.google.common.cache.LocalCache$LocalManualCache.get(LocalCache.java:4764)
at org.apache.hcatalog.common.HiveClientCache.getOrCreate(HiveClientCache.java:167)
at org.apache.hcatalog.common.HiveClientCache.get(HiveClientCache.java:143)
at org.apache.hcatalog.common.HCatUtil.getHiveClient(HCatUtil.java:548)
at org.apache.hcatalog.api.HCatClientHMSImpl.initialize(HCatClientHMSImpl.java:596)
... 27 more
testNewUsingACLs(org.apache.oozie.util.TestZKUtilsWithSecurity) Time elapsed: 0.009 sec <<< ERROR!
java.io.IOException: Could not configure server because SASL configuration did not allow the ZooKeeper server to authenticate itself properly: javax.security.auth.login.LoginException: Bad JAAS configuration: unrecognized option: storeKey
at org.apache.zookeeper.server.ServerCnxnFactory.configureSaslLogin(ServerCnxnFactory.java:207)
at org.apache.zookeeper.server.NIOServerCnxnFactory.configure(NIOServerCnxnFactory.java:87)
at org.apache.zookeeper.server.ZooKeeperServerMain.runFromConfig(ZooKeeperServerMain.java:111)
at org.apache.curator.test.TestingZooKeeperMain.runFromConfig(TestingZooKeeperMain.java:73)
at org.apache.curator.test.TestingZooKeeperServer$1.run(TestingZooKeeperServer.java:134)
at java.lang.Thread.run(Thread.java:863)

...

howto reproduce :
git clone -b branch-4.1 https://github.com/apache/oozie.git
cd oozie
./bin/mkdistro.sh -DskipTests -Phadoop-2
cd zookeeper-security-tests/
mvn clean test -Phadoop-2