mirror of
https://github.com/apache/impala.git
synced 2025-12-19 09:58:28 -05:00
1913ab46ed
To remove the dependency on Python 2, existing scripts need to use python3 rather than python. These commands find those locations (for impala-python and regular python): git grep impala-python | grep -v impala-python3 | grep -v impala-python-common | grep -v init-impala-python git grep bin/python | grep -v python3 This removes or switches most of these locations by various means: 1. If a python file has a #!/bin/env impala-python (or python) but doesn't have a main function, it removes the hash-bang and makes sure that the file is not executable. 2. Most scripts can simply switch from impala-python to impala-python3 (or python to python3) with minimal changes. 3. The cm-api pypi package (which doesn't support Python 3) has been replaced by the cm-client pypi package and interfaces have changed. Rather than migrating the code (which hasn't been used in years), this deletes the old code and stops installing cm-api into the virtualenv. The code can be restored and revamped if there is any interest in interacting with CM clusters. 4. This switches tests/comparison over to impala-python3, but this code has bit-rotted. Some pieces can be run manually, but it can't be fully verified with Python 3. It shouldn't hold back the migration on its own. 5. This also replaces locations of impala-python in comments / documentation / READMEs. 6. kazoo (used for interacting with HBase) needed to be upgraded to a version that supports Python 3. The newest version of kazoo requires upgrades of other component versions, so this uses kazoo 2.8.0 to avoid needing other upgrades. The two remaining uses of impala-python are: - bin/cmake_aux/create_virtualenv.sh - bin/impala-env-versioned-python These will be removed separately when we drop Python 2 support completely. In particular, these are useful for testing impala-shell with Python 2 until we stop supporting Python 2 for impala-shell. The docker-based tests still use /usr/bin/python, but this can be switched over independently (and doesn't impact impala-python) Testing: - Ran core job - Ran build + dataload on Centos 7, Redhat 8 - Manual testing of individual scripts (except some bitrotted areas like the random query generator) Change-Id: If209b761290bc7e7c716c312ea757da3e3bca6dc Reviewed-on: http://gerrit.cloudera.org:8080/23468 Reviewed-by: Michael Smith <michael.smith@cloudera.com> Tested-by: Michael Smith <michael.smith@cloudera.com>
87 lines
3.5 KiB
Python
87 lines
3.5 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
import pytest
|
|
|
|
from tests.common.impala_test_suite import ImpalaTestSuite
|
|
from tests.common.test_dimensions import create_client_protocol_http_transport
|
|
from tests.shell.util import create_impala_shell_executable_dimension
|
|
from tests.shell.util import run_impala_shell_cmd
|
|
from k5test import K5Realm
|
|
|
|
|
|
class TestImpalaShellKerberosAuth(ImpalaTestSuite):
|
|
|
|
@classmethod
|
|
def add_test_dimensions(cls):
|
|
"""Overrides all other add_dimension methods in super classes up the entire class
|
|
hierarchy ensuring that each test in this class only get run once
|
|
on different python versions."""
|
|
cls.ImpalaTestMatrix.add_dimension(create_client_protocol_http_transport())
|
|
cls.ImpalaTestMatrix.add_dimension(create_impala_shell_executable_dimension())
|
|
|
|
@pytest.mark.execute_serially
|
|
def test_kerberos_host_fqdn_option(self, vector):
|
|
"""
|
|
This test checks whether impala-shell uses the hostname specified in
|
|
the kerberos_host_fqdn option when looking for a service principal
|
|
for Kerberos authentication.
|
|
|
|
Note: Since the Kerberos authentication is not enabled in the python
|
|
test environment, the connection will fail for sure, but the Kerberos
|
|
log can be used to check if the correct service principal is used.
|
|
"""
|
|
realm = None
|
|
try:
|
|
realm = self._create_kerberos_realm_and_user("testuser", "password")
|
|
env = {
|
|
"KRB5CCNAME": "FILE:" + realm.ccache, # Ticket cache created by kinit
|
|
"KRB5_TRACE": "/dev/stderr", # Krb log to validate the principals
|
|
}
|
|
result = run_impala_shell_cmd(vector, ['--kerberos',
|
|
'--connect_max_tries=1',
|
|
'--protocol=hs2-http',
|
|
'--kerberos_host_fqdn=any.host',
|
|
'--quiet'], env=env)
|
|
|
|
assert "testuser@KRBTEST.COM" in result.stderr, \
|
|
"Principal 'testuser@KRBTEST.COM' should be in the Kerberos log"
|
|
assert "impala/any.host@KRBTEST.COM" in result.stderr, \
|
|
"Principal 'impala/any.host@KRBTEST.COM' should be in the Kerberos log"
|
|
finally:
|
|
realm.stop_kdc()
|
|
|
|
def _create_kerberos_realm_and_user(self, principal, password):
|
|
"""
|
|
Initializes a test Kerberos realm, creates a new user principal,
|
|
and runs kinit to get a Kerberos ticket.
|
|
|
|
Args:
|
|
principal (str): Name of the new Kerberos user principal.
|
|
password (str): Password of the new Kerberos user principal.
|
|
|
|
Returns:
|
|
realm (K5Realm): The Kerberos realm.
|
|
"""
|
|
realm = K5Realm(create_host=False, get_creds=False)
|
|
realm.addprinc(principal, password)
|
|
realm.kinit(principal, password)
|
|
return realm
|