[
https://issues.apache.org/jira/browse/FLINK-39880?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Nuyanzin resolved FLINK-39880.
-------------------------------------
Fix Version/s: 2.4.0
Resolution: Fixed
> YARNSessionFIFOSecuredITCase fails for java25
> ---------------------------------------------
>
> Key: FLINK-39880
> URL: https://issues.apache.org/jira/browse/FLINK-39880
> Project: Flink
> Issue Type: Sub-task
> Components: Build System / CI, Deployment / YARN, Tests
> Reporter: Sergey Nuyanzin
> Assignee: Sergey Nuyanzin
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.4.0
>
>
> {noformat}
> java.lang.RuntimeException: Exception occurred while setting up secure test
> context. Reason: {}
> Jun 06 15:44:22 at
> org.apache.flink.yarn.YARNSessionFIFOSecuredITCase.setup(YARNSessionFIFOSecuredITCase.java:124)
> Jun 06 15:44:22 at
> java.base/java.lang.reflect.Method.invoke(Method.java:565)
> Jun 06 15:44:22 at
> java.base/java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:511)
> Jun 06 15:44:22 at
> java.base/java.util.concurrent.ForkJoinPool$WorkQueue.topLevelExec(ForkJoinPool.java:1450)
> Jun 06 15:44:22 at
> java.base/java.util.concurrent.ForkJoinPool.runWorker(ForkJoinPool.java:2019)
> Jun 06 15:44:22 at
> java.base/java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:187)
> Jun 06 15:44:22 Caused by:
> org.apache.flink.runtime.security.modules.SecurityModule$SecurityInstallException:
> Unable to set the Hadoop login user
> Jun 06 15:44:22 at
> org.apache.flink.runtime.security.modules.HadoopModule.install(HadoopModule.java:119)
> Jun 06 15:44:22 at
> org.apache.flink.runtime.security.SecurityUtils.installModules(SecurityUtils.java:76)
> Jun 06 15:44:22 at
> org.apache.flink.runtime.security.SecurityUtils.install(SecurityUtils.java:57)
> Jun 06 15:44:22 at
> org.apache.flink.test.util.TestingSecurityContext.install(TestingSecurityContext.java:46)
> Jun 06 15:44:22 at
> org.apache.flink.yarn.YARNSessionFIFOSecuredITCase.setup(YARNSessionFIFOSecuredITCase.java:105)
> Jun 06 15:44:22 ... 5 more
> Jun 06 15:44:22 Caused by: org.apache.hadoop.security.KerberosAuthException:
> failure to login: for principal: hadoop/[email protected] from keytab
> /tmp/junit-9160832649541054399/test-users.keytab
> javax.security.auth.login.LoginException: null (5001) -
> org/apache/kerby/kerberos/kerb/type/kdc/KdcClientRequest
> Jun 06 15:44:22 at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2068)
> Jun 06 15:44:22 at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytabAndReturnUGI(UserGroupInformation.java:1396)
> Jun 06 15:44:22 at
> org.apache.hadoop.security.UserGroupInformation.loginUserFromKeytab(UserGroupInformation.java:1134)
> Jun 06 15:44:22 at
> org.apache.flink.runtime.security.token.hadoop.KerberosLoginProvider.doLogin(KerberosLoginProvider.java:96)
> Jun 06 15:44:22 at
> org.apache.flink.runtime.security.modules.HadoopModule.install(HadoopModule.java:75)
> Jun 06 15:44:22 ... 9 more
> Jun 06 15:44:22 Caused by: javax.security.auth.login.LoginException: null
> (5001) - org/apache/kerby/kerberos/kerb/type/kdc/KdcClientRequest
> Jun 06 15:44:22 at
> jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:789)
> Jun 06 15:44:22 at
> jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.login(Krb5LoginModule.java:601)
> Jun 06 15:44:22 at
> java.base/javax.security.auth.login.LoginContext.invoke(LoginContext.java:603)
> Jun 06 15:44:22 at
> java.base/javax.security.auth.login.LoginContext.login(LoginContext.java:460)
> Jun 06 15:44:22 at
> org.apache.hadoop.security.UserGroupInformation$HadoopLoginContext.login(UserGroupInformation.java:2152)
> Jun 06 15:44:22 at
> org.apache.hadoop.security.UserGroupInformation.doSubjectLogin(UserGroupInformation.java:2051)
> Jun 06 15:44:22 ... 13 more
> Jun 06 15:44:22 Caused by: KrbException: null (5001) -
> org/apache/kerby/kerberos/kerb/type/kdc/KdcClientRequest
> Jun 06 15:44:22 at
> java.security.jgss/sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:82)
> Jun 06 15:44:22 at
> java.security.jgss/sun.security.krb5.KrbAsReqBuilder.send(KrbAsReqBuilder.java:347)
> Jun 06 15:44:22 at
> java.security.jgss/sun.security.krb5.KrbAsReqBuilder.action(KrbAsReqBuilder.java:500)
> Jun 06 15:44:22 at
> jdk.security.auth/com.sun.security.auth.module.Krb5LoginModule.attemptAuthentication(Krb5LoginModule.java:765)
> Jun 06 15:44:22 ... 18 more
> Jun 06 15:44:22 Caused by: KrbException: Identifier doesn't match expected
> value (906)
> Jun 06 15:44:22 at
> java.security.jgss/sun.security.krb5.internal.KDCRep.init(KDCRep.java:141)
> Jun 06 15:44:22 at
> java.security.jgss/sun.security.krb5.internal.ASRep.init(ASRep.java:64)
> Jun 06 15:44:22 at
> java.security.jgss/sun.security.krb5.internal.ASRep.<init>(ASRep.java:59)
> Jun 06 15:44:22 at
> java.security.jgss/sun.security.krb5.KrbAsRep.<init>(KrbAsRep.java:60)
> Jun 06 15:44:22 ... 21 more
> {noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
