Opened 19 years ago

Closed 9 years ago

#64 closed defect (fixed)

IZ358: Kerberos credentials are not being deleted on execution host

Reported by: svdavidson Owned by:
Priority: low Milestone:
Component: sge Version: 5.3
Severity: minor Keywords: execution


[Imported from gridengine issuezilla]

        Issue #:      358              Platform:     All      Reporter: svdavidson (svdavidson)
       Component:     gridengine          OS:        All
     Subcomponent:    execution        Version:      5.3         CC:    None defined
        Status:       REOPENED         Priority:     P4
      Resolution:                     Issue type:    DEFECT
                                   Target milestone: ---
      Assigned to:    svdavidson (svdavidson)
      QA Contact:     pollinger
       * Summary:     Kerberos credentials are not being deleted on execution host
   Status whiteboard:

     Issue 358 blocks:
   Votes for issue 358:

   Opened: Thu Aug 15 13:57:00 -0700 2002 

While running some Kerberos cross-realm
authentication tests, I noticed that the Kerberos
forwarded credentials are not being deleted at the
end of the job. I ran the debug and found that the
delete_credentials() function is being called
properly, but the wrong credentials cache name is
being stored in KRB5CCNAME to pass to the
delete_cred security sub-program.  The name should
be FILE:/tmp/krb5cc_sge_<jobid>, but the name
being passed is FILE:/tmp/krb5cc_qmaster_<jobid>,
which is the name of the credenials cache used on
the qmaster host.  I plan on fixing this in the
5.3 branch and the main development trunk.

   ------- Additional comments from andreas Fri Mar 5 08:09:01 -0700 2004 -------
won't be fixed for 6.0 beta

   ------- Additional comments from andreas Mon Mar 29 04:53:02 -0700 2004 -------

   ------- Additional comments from sgrell Tue Dec 6 07:59:54 -0700 2005 -------
Changed the subcomponent.


Change History (1)

comment:1 Changed 9 years ago by dlove

  • Resolution set to fixed
  • Severity set to minor
  • Status changed from new to closed
Note: See TracTickets for help on using tickets.