[SLIDER-1027] add a kdiag command for kerberos diagnostics

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Slider 0.90.2
• Fix Version/s: Slider 0.90.2
• Component/s: client

Environment

Kerberos

• Sprint: Slider September #1
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 15/Dec/15 19:45
• Updated: 16/Dec/15 19:04
• Resolved: 16/Dec/15 16:31

Description

Trying to debug kerberos problems is painful exercise

Add a kerberos diagnostics command, `kdiag` to aid this; output to stdout or to a named file.

add other args as appropriate, etg

• `--required` - fail with exit code if no login
• `--zookeeper` check zk details
• `--hdfs` check HDFS
• `--yarn` check yarn login
• --keytab + keytab name`: check for accessibility, contents

Issue Links

• is depended upon by: HADOOP-12426 Add Entry point for Kerberos health check
• is related to: HADOOP-12649 Improve Kerberos diagnostics and failure handling