You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
101 lines
4.5 KiB
101 lines
4.5 KiB
# Licensed to the Apache Software Foundation (ASF) under one or more |
|
# contributor license agreements. See the NOTICE file distributed with |
|
# this work for additional information regarding copyright ownership. |
|
# The ASF licenses this file to You under the Apache License, Version 2.0 |
|
# (the "License"); you may not use this file except in compliance with |
|
# the License. You may obtain a copy of the License at |
|
# |
|
# http://www.apache.org/licenses/LICENSE-2.0 |
|
# |
|
# Unless required by applicable law or agreed to in writing, software |
|
# distributed under the License is distributed on an "AS IS" BASIS, |
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
|
# See the License for the specific language governing permissions and |
|
# limitations under the License. |
|
|
|
from ducktape.services.service import Service |
|
from kafkatest.services.kafka.directory import kafka_dir |
|
|
|
import os |
|
from tempfile import mkstemp |
|
from shutil import move |
|
from os import remove, close |
|
from io import open |
|
import uuid |
|
|
|
class MiniKdc(Service): |
|
|
|
logs = { |
|
"minikdc_log": { |
|
"path": "/mnt/minikdc/minikdc.log", |
|
"collect_default": True} |
|
} |
|
|
|
WORK_DIR = "/mnt/minikdc" |
|
PROPS_FILE = "/mnt/minikdc/minikdc.properties" |
|
KEYTAB_FILE = "/mnt/minikdc/keytab" |
|
KRB5CONF_FILE = "/mnt/minikdc/krb5.conf" |
|
LOG_FILE = "/mnt/minikdc/minikdc.log" |
|
LOCAL_KEYTAB_FILE = "/tmp/" + str(uuid.uuid4().get_hex()) + "_keytab" |
|
LOCAL_KRB5CONF_FILE = "/tmp/" + str(uuid.uuid4().get_hex()) + "_krb5.conf" |
|
|
|
def __init__(self, context, kafka_nodes, extra_principals = ""): |
|
super(MiniKdc, self).__init__(context, 1) |
|
self.kafka_nodes = kafka_nodes |
|
self.extra_principals = extra_principals |
|
|
|
def replace_in_file(self, file_path, pattern, subst): |
|
fh, abs_path = mkstemp() |
|
with open(abs_path, 'w') as new_file: |
|
with open(file_path) as old_file: |
|
for line in old_file: |
|
new_file.write(line.replace(pattern, subst)) |
|
close(fh) |
|
remove(file_path) |
|
move(abs_path, file_path) |
|
|
|
|
|
def start_node(self, node): |
|
|
|
node.account.ssh("mkdir -p %s" % MiniKdc.WORK_DIR, allow_fail=False) |
|
props_file = self.render('minikdc.properties', node=node) |
|
node.account.create_file(MiniKdc.PROPS_FILE, props_file) |
|
self.logger.info("minikdc.properties") |
|
self.logger.info(props_file) |
|
|
|
kafka_principals = ' '.join(['kafka/' + kafka_node.account.hostname for kafka_node in self.kafka_nodes]) |
|
principals = 'client ' + kafka_principals + self.extra_principals |
|
self.logger.info("Starting MiniKdc with principals " + principals) |
|
|
|
jar_paths = self.core_jar_paths(node, "dependant-testlibs") + self.core_jar_paths(node, "libs") |
|
classpath = ":".join(jar_paths) |
|
cmd = "CLASSPATH=%s /opt/%s/bin/kafka-run-class.sh kafka.security.minikdc.MiniKdc %s %s %s %s 1>> %s 2>> %s &" % (classpath, kafka_dir(node), MiniKdc.WORK_DIR, MiniKdc.PROPS_FILE, MiniKdc.KEYTAB_FILE, principals, MiniKdc.LOG_FILE, MiniKdc.LOG_FILE) |
|
self.logger.debug("Attempting to start MiniKdc on %s with command: %s" % (str(node.account), cmd)) |
|
with node.account.monitor_log(MiniKdc.LOG_FILE) as monitor: |
|
node.account.ssh(cmd) |
|
monitor.wait_until("MiniKdc Running", timeout_sec=60, backoff_sec=1, err_msg="MiniKdc didn't finish startup") |
|
|
|
node.account.scp_from(MiniKdc.KEYTAB_FILE, MiniKdc.LOCAL_KEYTAB_FILE) |
|
node.account.scp_from(MiniKdc.KRB5CONF_FILE, MiniKdc.LOCAL_KRB5CONF_FILE) |
|
|
|
#KDC is set to bind openly (via 0.0.0.0). Change krb5.conf to hold the specific KDC address |
|
self.replace_in_file(MiniKdc.LOCAL_KRB5CONF_FILE, '0.0.0.0', node.account.hostname) |
|
|
|
def core_jar_paths(self, node, lib_dir_name): |
|
lib_dir = "/opt/%s/core/build/%s" % (kafka_dir(node), lib_dir_name) |
|
jars = node.account.ssh_capture("ls " + lib_dir) |
|
return [os.path.join(lib_dir, jar.strip()) for jar in jars] |
|
|
|
def stop_node(self, node): |
|
self.logger.info("Stopping %s on %s" % (type(self).__name__, node.account.hostname)) |
|
node.account.kill_process("apacheds", allow_fail=False) |
|
|
|
def clean_node(self, node): |
|
node.account.kill_process("apacheds", clean_shutdown=False, allow_fail=False) |
|
node.account.ssh("rm -rf " + MiniKdc.WORK_DIR, allow_fail=False) |
|
if os.path.exists(MiniKdc.LOCAL_KEYTAB_FILE): |
|
os.remove(MiniKdc.LOCAL_KEYTAB_FILE) |
|
if os.path.exists(MiniKdc.LOCAL_KRB5CONF_FILE): |
|
os.remove(MiniKdc.LOCAL_KRB5CONF_FILE) |
|
|
|
|
|
|