accumulo-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Josh Elser <>
Subject Fwd: [jira] [Commented] (ACCUMULO-3599) Get more (all) ITs running with Kerberos
Date Tue, 03 Mar 2015 19:23:56 GMT

This was a big changset, but shouldn't have any significant impact out 
of the scope of integration tests.

If you see ITs start failing that previously did not, let me know and I 
can look into 'em (since I likely broke them). Normal `mvn verify` 
invocations should still all be passing (as is our contract).

-------- Original Message --------
Subject: [jira] [Commented] (ACCUMULO-3599) Get more (all) ITs running 
with Kerberos
Date: Tue, 3 Mar 2015 19:22:05 +0000 (UTC)
From: Josh Elser (JIRA) <>



Josh Elser commented on ACCUMULO-3599:

I got to a point where all of the ITs are passing with a normal MAC and 
a MAC which is using Kerberos via Hadoop's MiniKdc. There were a few 
tests (those which tried to run MapReduce) which I just ignore when 
we're running with Kerberos on as I haven't figured out how I can 
actually get these working (do I just need to construct an inline 
Configuration with the necessary properties?).

The short of it is that new ITs which only perform some task as the 
"root" user shouldn't have changed. Use the {{getConnector}} method and 
things should be fine -- the test harness will do the work for you 
depending on the environment. If the test uses multiple users, doesn't 
anything with user mgmt (e.g. {{createLocalUser}}), then things get a 
little different. Still a TBD to update the docs.

A secondary goal of the above was to make sure that the changes made to 
support MAC w/ or w/o Kerberos also support a standalone cluster with 
Kerberos. I've already found an issue in the first test class I ran, so 
I anticipate more changes to come, but I wanted to get this in while I 
know it's in a good state.

As always, if you notice new test failures, feel free to open a new 
issue and assign it to me.

> Get more (all) ITs running with Kerberos
> ----------------------------------------
>                 Key: ACCUMULO-3599
>                 URL:
>             Project: Accumulo
>          Issue Type: Test
>          Components: test
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>             Fix For: 1.7.0
>          Time Spent: 20m
>  Remaining Estimate: 0h
> As a part of ACCUMULO-2815 and ACCUMULO-3513, a KerberosIT was added that work, although
there is no way to run the existing IT suite against a secure cluster.
> It would be ideal to be able to run all tests against an Accumulo cluster using Kerberos,
even better would be the ability to have a {{-DuseKerberosForITs}} flag like SSL.
> The big change will be the management of users as PasswordTokens will no longer be valid.
Creating and using keytabs for test users isn't an issue, but avoiding rewriting every test
with a conditional block might be tricky since we currently have no use of {{UserGroupInformation}}
in our normal tests.

This message was sent by Atlassian JIRA

View raw message