Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[#6330] chore: add MIT license to missing files #6355

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

zzzk1
Copy link
Contributor

@zzzk1 zzzk1 commented Jan 22, 2025

What changes were proposed in this pull request?

Add ASF header to missing files

Why are the changes needed?

Fix: #6330

Does this PR introduce any user-facing change?

no

How was this patch tested?

no

@justinmclean
Copy link
Member

Do we know where these files come from? ii.e. are they actually Apache licensed?

@jerryshao
Copy link
Contributor

They are just configuration files for Kerberos, which will be used for kerberized integrated test.

@jerryshao jerryshao requested review from jerqi and yuqi1129 January 23, 2025 12:40
@jerryshao
Copy link
Contributor

@jerqi @yuqi1129 can you please help to review?

@yuqi1129
Copy link
Contributor

Those files are template configuration files copied from Linux software kerberos-server which is under the MIT license, so in this case, I'm afraid that we can add an Apache license header here.

@justinmclean , About which license should we use, do you have more input?

@zzzk1
Copy link
Contributor Author

zzzk1 commented Jan 23, 2025

Maybe we should keep MIT license top and append Apache license.

@justinmclean
Copy link
Member

@yuqi1129 No, we cannot add an ASF license; if the code has another license, that license must be kept and not replaced unless you have permission from the original owners. If they are licensed under the MIT lisense then that also needs to be mentioned in the LICENSE file. Can you please give me a link to the original files, so I can check the license.

@yuqi1129
Copy link
Contributor

I'm afraid that we can add an Apache license header here.

Sorry, the word should be we can't NOT we can.

@yuqi1129
Copy link
Contributor

@yuqi1129 No, we cannot add an ASF license; if the code has another license, that license must be kept and not replaced unless you have permission from the original owners. If they are licensed under the MIT lisense then that also needs to be mentioned in the LICENSE file. Can you please give me a link to the original files, so I can check the license.

The krb5-kdc can be found here.

# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

kdc_ports = 88
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I only see kdc.conf

@zzzk1 zzzk1 changed the title [#6330] chore: add ASF header to missing files [#6330] chore: add MIT license to missing files Jan 24, 2025
@zzzk1
Copy link
Contributor Author

zzzk1 commented Jan 24, 2025

I think we should add MIT license for kdc.conf, only one now.

@justinmclean
Copy link
Member

justinmclean commented Jan 24, 2025

See also https://infra.apache.org/licensing-howto.html#permissive-deps for what needs to be done to LICENSE (i.e. MIT license needs to be added).

@yuqi1129
Copy link
Contributor

See also infra.apache.org/licensing-howto.html#permissive-deps for what needs to be done to LICENSE (i.e. MIT license needs to be added).

Can you provide an example of what we should do here? It's too vague here to just give a link. What I (we) want is the specific license content for those three files here.

@jerryshao
Copy link
Contributor

Please be aware that these files are just Kerberos configuration files to make CI work, not the code copying from Kerberos source code.

@justinmclean
Copy link
Member

So where were the files copied from? At least one of them looks to come from https://salsa.debian.org/debian/krb5/-/blob/master/src/config-files/kdc.conf

@jerryshao
Copy link
Contributor

It is hard to say it is copied from other projects, because they all look the same.

@justinmclean
Copy link
Member

justinmclean commented Jan 26, 2025

So the issue is:

  1. These files were copied from somewhere but we're not 100% sure where from.
  2. We can't put ASF headers on them as they are 3rd party code.
  3. Because of 1 and 2 they need to be listed in LICENSE
  4. They are most likely MIT licensed, but we're not 100% sure.

@justinmclean
Copy link
Member

@yuqi1129 seemed sure the files were copied from here, is that incorrect?

@yuqi1129
Copy link
Contributor

@yuqi1129 seemed sure the files were copied from here, is that incorrect?

Yes, the files have been copied from the KDC software used in the Kerberized Hive Docker image. please see:

service krb5-kdc start
service krb5-admin-server start
# create Kerberos principal and keytab files
FQDN="HADOOPKRB"
ADMIN="admin"
PASS="Admin12!"
KRB5_KTNAME=/etc/admin.keytab
echo -e "${PASS}\n${PASS}" | kadmin.local -q "addprinc ${ADMIN}/admin"
echo -e "${PASS}\n${PASS}" | kadmin.local -q "addprinc cli@${FQDN}"
echo -e "${PASS}\n${PASS}" | kadmin.local -q "addprinc hdfs/${HOSTNAME}@${FQDN}"
echo -e "${PASS}\n${PASS}" | kadmin.local -q "addprinc HTTP/${HOSTNAME}@${FQDN}"
echo -e "${PASS}\n${PASS}" | kadmin.local -q "addprinc hive/${HOSTNAME}@${FQDN}"
echo -e "${PASS}\n${PASS}" | kadmin.local -q "addprinc yarn/${HOSTNAME}@${FQDN}"
kadmin.local -q "ktadd -norandkey -k ${KRB5_KTNAME} cli@${FQDN}"
kadmin.local -q "ktadd -norandkey -k ${KRB5_KTNAME} hdfs/${HOSTNAME}@${FQDN}"
kadmin.local -q "ktadd -norandkey -k ${KRB5_KTNAME} HTTP/${HOSTNAME}@${FQDN}"
kadmin.local -q "ktadd -norandkey -k ${KRB5_KTNAME} yarn/${HOSTNAME}@${FQDN}"
kadmin.local -q "xst -k /hdfs.keytab -norandkey hdfs/${HOSTNAME}@${FQDN}"
kadmin.local -q "xst -k /hdfs.keytab -norandkey HTTP/${HOSTNAME}@${FQDN}"
kadmin.local -q "xst -k /yarn.keytab -norandkey yarn/${HOSTNAME}@${FQDN}"
kadmin.local -q "ktadd -norandkey -k ${KRB5_KTNAME} hive/${HOSTNAME}@${FQDN}"
kadmin.local -q "xst -k /hive.keytab -norandkey hive/${HOSTNAME}@${FQDN}"
kadmin.local -q "xst -k /cli.keytab -norandkey cli@${FQDN}"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Improvement] kerberos-hive file missing ASF headers
4 participants