Skip to content

Conversation

@aswinshakil
Copy link
Member

What changes were proposed in this pull request?

We are unable to get secret even though we kinit with the same user for which we want to retrieve the secret. This PR aims to fix this by getting short user principal and not the full prinicipal.

What is the link to the Apache JIRA

https://issues.apache.org/jira/browse/HDDS-6968

How was this patch tested?

The patch was tested manually in a cluster and also using CI tests.

bash-4.2$ klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [email protected]

bash-4.2$ ozone tenant user getsecret 'tenant$systest' --om-service-id=ozone1
export AWS_ACCESS_KEY_ID='tenant$systest'
export AWS_SECRET_ACCESS_KEY='e264d0460c146624d381d058677b4102f8deaaa7302ad589d85adc1c3fdd7d16'

Copy link
Contributor

@smengcl smengcl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @aswinshakil for the patch!

@smengcl smengcl merged commit 7a1a626 into apache:master Jun 29, 2022
@aswinshakil aswinshakil deleted the HDDS-6968 branch July 1, 2022 22:12
@aswinshakil aswinshakil restored the HDDS-6968 branch July 1, 2022 22:13
duongkame pushed a commit to duongkame/ozone that referenced this pull request Aug 16, 2022
… correct user. apache#3566

HDDS-6968. Addendum: [Multi-Tenant] Fix USER_MISMATCH error even on correct user. apache#3578
Change-Id: I0f9079a2a383f667b6deda58d3210e37c764b0d2

Change-Id: I8fed119ee85b231fce748985007cbbc8e99fed0b
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants