From e8d97175fa6ef9e38316c12ba1b48fb12b5f2b0e Mon Sep 17 00:00:00 2001 From: Calvin Kirs Date: Wed, 18 Sep 2024 11:07:48 +0800 Subject: [PATCH 1/2] [Fix](test)Fixing the Issue of Kerberos Principal Not Mapping Correctly to a Local User --- .../kerberos/test_single_hive_kerberos.groovy | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy b/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy index 7a0864923f51cb..bd129072030ab3 100644 --- a/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy +++ b/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy @@ -29,6 +29,10 @@ suite("test_single_hive_kerberos", "p0,external,kerberos,external_docker,externa "hadoop.security.authentication" = "kerberos", "hadoop.kerberos.principal"="presto-server/presto-master.docker.cluster@LABS.TERADATA.COM", "hadoop.kerberos.keytab" = "/keytabs/presto-server.keytab", + "hadoop.security.auth_to_local" = "RULE:[2:\$1@\$0](.*@LABS.TERADATA.COM)s/@.*// + RULE:[2:\$1@\$0](.*@OTHERLABS.TERADATA.COM)s/@.*// + RULE:[2:\$1@\$0](.*@OTHERREALM.COM)s/@.*// + DEFAULT", "hive.metastore.sasl.enabled " = "true", "hive.metastore.kerberos.principal" = "hive/_HOST@LABS.TERADATA.COM" ); @@ -57,7 +61,7 @@ suite("test_single_hive_kerberos", "p0,external,kerberos,external_docker,externa logger.info(e.toString()) // caused by a warning msg if enable sasl on hive but "hive.metastore.sasl.enabled" is not true: // "set_ugi() not successful, Likely cause: new client talking to old server. Continuing without it." - assertTrue(e.toString().contains("org.apache.thrift.transport.TTransportException: null")) + assertTrue(e.toString().contains("thrift.transport.TTransportException: null")) } try { From 994b3c723f73dc489c40b0d39d8c64de6450318c Mon Sep 17 00:00:00 2001 From: Calvin Kirs Date: Wed, 18 Sep 2024 17:34:44 +0800 Subject: [PATCH 2/2] fix test --- .../external_table_p0/kerberos/test_single_hive_kerberos.groovy | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy b/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy index bd129072030ab3..dfe5532fefdb44 100644 --- a/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy +++ b/regression-test/suites/external_table_p0/kerberos/test_single_hive_kerberos.groovy @@ -61,7 +61,7 @@ suite("test_single_hive_kerberos", "p0,external,kerberos,external_docker,externa logger.info(e.toString()) // caused by a warning msg if enable sasl on hive but "hive.metastore.sasl.enabled" is not true: // "set_ugi() not successful, Likely cause: new client talking to old server. Continuing without it." - assertTrue(e.toString().contains("thrift.transport.TTransportException: null")) + assertTrue(e.toString().contains("thrift.transport.TTransportException")) } try {