[ACCUMULO-4671] ConfiguratorBase.unwrapAuthenticationToken will NPE if the Token is not in the Job's credentials

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Auto Closed
• Component/s: mapreduce
• Assignee: Josh Elser
• Reporter: Josh Elser
• Created: 28/Jun/17 23:40
• Updated: 27/Aug/19 23:14
• Resolved: 27/Aug/19 23:14

Description

When Kerberos is enabled, the AuthenticationToken set on the Configuration object is essentially a pointer to the Hadoop-style Token stored (securely) in the Job's credentials object.

However, if by user error, the user thinks that they have serialized a Token (but it got lost along the way), unwrapAuthenticationToken will throw an NPE trying to extract that token. The name of the Token is abstracted away from the user (they shouldn't actually know what it is), so we should not fail hard like this.

It would be easy to return back the original token in this case and update the javadoc accordingly to warn users.

Issue Links

• relates to: HIVE-16973 Fetching of Delegation tokens (Kerberos) for AccumuloStorageHandler fails in HS2