Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KAFKA-5173: Log jaas.config if broker fails to start #2985

Closed
wants to merge 4 commits into from

Conversation

rajinisivaram
Copy link
Contributor

No description provided.

@asfbot
Copy link

asfbot commented May 5, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk7-scala2.10/3567/
Test FAILed (JDK 7 and Scala 2.10).

@asfbot
Copy link

asfbot commented May 5, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk7-scala2.10/3569/
Test PASSed (JDK 7 and Scala 2.10).

@asfbot
Copy link

asfbot commented May 5, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.12/3565/
Test FAILed (JDK 8 and Scala 2.12).

@asfbot
Copy link

asfbot commented May 5, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.11/3575/
Test FAILed (JDK 8 and Scala 2.11).

@ijuma
Copy link
Contributor

ijuma commented May 6, 2017

The additional logging:

2017-05-05 22:08:40,058] ERROR Jaas config /tmp/kafka9139469497082854641.tmp exists? true, KafkaServer context is: null (kafka.utils.TestUtils$:99)
[2017-05-05 22:08:40,060] ERROR Jaas config file contents: KafkaServer {
  com.sun.security.auth.module.Krb5LoginModule required
  debug=true
  serviceName="kafka"
  keyTab="/tmp/kafka3843243500191588648.tmp"
  principal="kafka/localhost@EXAMPLE.COM"
  storeKey="true"
  useKeyTab="true";

};
KafkaClient {
  com.sun.security.auth.module.Krb5LoginModule required
  debug=true
  serviceName="kafka"
  keyTab="/tmp/kafka4115104151315724578.tmp"
  principal="client2@EXAMPLE.COM"
  storeKey="true"
  useKeyTab="true";

};
Server {
  org.apache.zookeeper.server.auth.DigestLoginModule required
  debug=false
  user_super="adminpasswd"
  user_fpj="fpjsecret";

};
Client {
  org.apache.zookeeper.server.auth.DigestLoginModule required
  debug=false
  username="fpj"
  password="fpjsecret";

}; (kafka.utils.TestUtils$:99)

@ijuma
Copy link
Contributor

ijuma commented May 6, 2017

I think it's a case of not clearing the cached Configuration before the relevant code is executed.

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk7-scala2.10/3712/
Test PASSed (JDK 7 and Scala 2.10).

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.11/3718/
Test PASSed (JDK 8 and Scala 2.11).

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.12/3708/
Test PASSed (JDK 8 and Scala 2.12).

@rajinisivaram
Copy link
Contributor Author

retest this please

@rajinisivaram
Copy link
Contributor Author

@ijuma Can you take a look at this? Thanks.

While running tests locally, I found three threads being left behind by the broker after shutdown. This could be one cause for failures in time-sensitve tests like the quota tests that are failing fairly frequently now. As far as I can tell, these threads should never be reloading JAAS config, so they are unlikely to be causing the jaas.config issue.

The PR logs JAAS sections and thread stack traces on failure. The last set of tests passed, I am waiting for a failure to see the thread dump.

@ijuma
Copy link
Contributor

ijuma commented May 10, 2017

@rajinisivaram, your thread leak changes look good. Maybe submit them as a separate PR?

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.11/3723/
Test PASSed (JDK 8 and Scala 2.11).

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk7-scala2.10/3717/
Test PASSed (JDK 7 and Scala 2.10).

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.12/3713/
Test PASSed (JDK 8 and Scala 2.12).

@rajinisivaram
Copy link
Contributor Author

@ijuma Yes, will do that under KAFKA-5182. Thanks.

@rajinisivaram
Copy link
Contributor Author

retest this please

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.11/3727/
Test FAILed (JDK 8 and Scala 2.11).

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk8-scala2.12/3717/
Test PASSed (JDK 8 and Scala 2.12).

@asfbot
Copy link

asfbot commented May 10, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk7-scala2.10/3721/
Test PASSed (JDK 7 and Scala 2.10).

@rajinisivaram
Copy link
Contributor Author

retest this please

@rajinisivaram
Copy link
Contributor Author

Closing this PR. Thread leak was fixed under #3014. JAAS config logging isn't necessary since none of the issues found were related to JAAS config being incorrect. Instead of thread dump on failure, PR #3026 fails if broker controller has not been shutdown. This is better since thread dump at the time of failure will not provide any indication about which tests may have caused the thread leak.

@asfbot
Copy link

asfbot commented May 11, 2017

Refer to this link for build results (access rights to CI server needed):
https://builds.apache.org/job/kafka-pr-jdk7-scala2.11/3779/
Test PASSed (JDK 7 and Scala 2.11).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants