accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Josh Elser (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ACCUMULO-3599) Get more (all) ITs running with Kerberos
Date Tue, 03 Mar 2015 19:22:05 GMT

    [ https://issues.apache.org/jira/browse/ACCUMULO-3599?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14345564#comment-14345564
] 

Josh Elser commented on ACCUMULO-3599:
--------------------------------------

I got to a point where all of the ITs are passing with a normal MAC and a MAC which is using
Kerberos via Hadoop's MiniKdc. There were a few tests (those which tried to run MapReduce)
which I just ignore when we're running with Kerberos on as I haven't figured out how I can
actually get these working (do I just need to construct an inline Configuration with the necessary
properties?).

The short of it is that new ITs which only perform some task as the "root" user shouldn't
have changed. Use the {{getConnector}} method and things should be fine -- the test harness
will do the work for you depending on the environment. If the test uses multiple users, doesn't
anything with user mgmt (e.g. {{createLocalUser}}), then things get a little different. Still
a TBD to update the docs.

A secondary goal of the above was to make sure that the changes made to support MAC w/ or
w/o Kerberos also support a standalone cluster with Kerberos. I've already found an issue
in the first test class I ran, so I anticipate more changes to come, but I wanted to get this
in while I know it's in a good state.

As always, if you notice new test failures, feel free to open a new issue and assign it to
me.

> Get more (all) ITs running with Kerberos
> ----------------------------------------
>
>                 Key: ACCUMULO-3599
>                 URL: https://issues.apache.org/jira/browse/ACCUMULO-3599
>             Project: Accumulo
>          Issue Type: Test
>          Components: test
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>             Fix For: 1.7.0
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> As a part of ACCUMULO-2815 and ACCUMULO-3513, a KerberosIT was added that work, although
there is no way to run the existing IT suite against a secure cluster.
> It would be ideal to be able to run all tests against an Accumulo cluster using Kerberos,
even better would be the ability to have a {{-DuseKerberosForITs}} flag like SSL.
> The big change will be the management of users as PasswordTokens will no longer be valid.
Creating and using keytabs for test users isn't an issue, but avoiding rewriting every test
with a conditional block might be tricky since we currently have no use of {{UserGroupInformation}}
in our normal tests.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message