From 7bc7aea15c034eec5aa1fcf8edb153e81ca42866 Mon Sep 17 00:00:00 2001 From: Michael Stack Date: Tue, 31 Jul 2018 13:42:26 -0700 Subject: [PATCH] HBASE-20512 document change to running tests on secure clusters --- src/main/asciidoc/_chapters/upgrading.adoc | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/src/main/asciidoc/_chapters/upgrading.adoc b/src/main/asciidoc/_chapters/upgrading.adoc index bc2ec1c103..2d0668753e 100644 --- a/src/main/asciidoc/_chapters/upgrading.adoc +++ b/src/main/asciidoc/_chapters/upgrading.adoc @@ -599,6 +599,19 @@ Performance is also an area that is now under active review so look forward to improvement in coming releases (See link:https://issues.apache.org/jira/browse/HBASE-20188[HBASE-20188 TESTING Performance]). +[[upgrade2.0.it.kerberos]] +.Integration Tests and Kerberos +Integration Tests (`IntegrationTests*`) used to rely on the Kerberos credential cache +for authentication against secured clusters. This used to lead to tests failing due +to authentication failures when the tickets in the credential cache expired. +As of hbase-2.0.0 (and hbase-1.3.0+), the integration test clients will make use +of the configuration properties `hbase.client.keytab.file` and +`hbase.client.kerberos.principal`. They are required. The clients will perform a +login from the configured keytab file and automatically refresh the credentials +in the background for the process lifetime (See +link:https://issues.apache.org/jira/browse/HBASE-16231[HBASE-16231]). + + //// This would be a good place to link to an appendix on migrating applications //// @@ -719,6 +732,11 @@ Notes: Doing a raw scan will now return results that have expired according to TTL settings. +[[upgrade1.3]] +=== Upgrading from pre-1.3 to 1.3+ +If running Integration Tests under Kerberos, see <>. + + [[upgrade1.0]] === Upgrading to 1.x -- 2.16.3