[ZOOKEEPER-1205] Add a unit test for Kerberos Ticket-Granting Ticket (TGT) renewal

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: tests
• Labels: kerberos security
• Assignee: Unassigned
• Reporter: Eugene Joseph Koontz
• Created: 27/Sep/11 05:04
• Updated: 03/Feb/22 08:50

Description

Create a unit test to test Kerberos ticket renewal.

Note that testing Kerberos-related functionality in Java requires that a default kerberos configuration file be available. The location of this file can be set with the java.security.krb5.conf property (see http://download.oracle.com/javase/1.4.2/docs/guide/security/jgss/tutorials/KerberosReq.html ). For more background on Java and Kerberos, see http://download.oracle.com/javase/1,5.0/docs/guide/security/jgss/single-signon.html . For discussion about TGT renewal, see http://freeipa.org/page/Automatic_Ticket_Renewal .

Mahadev Konar writes: "Mockito would be very helpful here."

Issue Links

• relates to: ZOOKEEPER-1174 FD leak when network unreachable
• relates to: ZOOKEEPER-1181 Fix problems with Kerberos TGT renewal
• relates to: HADOOP-8078 Add capability to turn on security in unit tests.
• relates to: HDFS-3016 Security in unit tests