[SLIDER-1035] Kdiag enhancements

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Slider 0.90.2
• Fix Version/s: Slider 0.91
• Component/s: client, security

Environment

Kerberos

• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 18/Dec/15 14:12
• Updated: 22/Jan/16 01:32
• Resolved: 18/Jan/16 20:08

Description

Proposed enhancements

1. make easier to run server-side. the sysprops to enable com.sun debugging should be cached and then restored —and only set if a -verbose flag is set.
2. check for Java Crypto Extensions having full key length; fail fast if not
3. list tokens
4. add option to check networking (hostname resolves)
5. look up KDCs and fail if none are reachable
6. maybe each title() call should force flush stderr, to try and keep JDK output in sync with stdout.
7. am to have option to display this and also fail fast
8. implement `--services` probes for : yarn, hdfs, registry, timeline. This can't go into any hadoop-common lib, a list of probes classes can be provided to execute as the provided UGI.

Issue Links

• breaks: SLIDER-1065 kdiag test failing on host without default realm
• is related to: HADOOP-12649 Improve Kerberos diagnostics and failure handling
• relates to: SLIDER-1059 Kdiag: validate and dump user credential cache file
• relates to: SLIDER-1057 Kdiag: dump and tell if AES 256 is enabled or not
• relates to: SLIDER-1058 Kdiag: dump keytab file out so user may aware its content