[HADOOP-14155] KerberosName.replaceParameters() may throw java.lang.ArrayIndexOutOfBoundsException

• Type: Bug
• Status: Patch Available
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.7.3
• Component/s: security
• Assignee: Unassigned
• Reporter: Dazhuang Su
• Created: 08/Mar/17 09:23
• Updated: 10/Nov/17 16:41

Description

In core-site.xml:
<property>
<name>hadoop.security.auth_to_local</name>
<value>
RULE:[1:$1](.*)
RULE:[2:$1$2](.*)
</value>
</property>

KerberosName.replaceParameters() replaces the numbered parameters of the form $n where n is from 1 to the length of params. Normal text is copied directly and $n is replaced by the corresponding parameter.
However, when RULE is configued as the following way (although it's wrong)

RULE:[1:$1$2](.*)

Then run command

hadoop org.apache.hadoop.security.HadoopKerberosName [e-mail]

It will throw ArrayIndexOutOfBoundsException instead of BadFormatString exception.

Issue Links

• is superceded by: HADOOP-14389 Exception handling is incorrect in KerberosName.java