[HADOOP-12897] KerberosAuthenticator.authenticate to include URL on IO failures

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.8.0
• Fix Version/s: 3.1.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Ajay Kumar
• Reporter: Steve Loughran
• Created: 07/Mar/16 15:00
• Updated: 19/Mar/18 18:32
• Resolved: 21/Feb/18 02:19

Description

If KerberosAuthenticator.authenticate can't connect to the endpoint, you get a stack trace, but without the URL it is trying to talk to.

That is: it doesn't have any equivalent of the NetUtils.wrapException handler —which can't be called here as its not in the hadoop-auth module

Issue Links

• breaks: HADOOP-15280 TestKMS.testWebHDFSProxyUserKerb and TestKMS.testWebHDFSProxyUserSimple fail in trunk
• is related to: HADOOP-14959 DelegationTokenAuthenticator.authenticate() to wrap network exceptions