[HADOOP-10774] Update KerberosTestUtils for hadoop-auth tests when using IBM Java

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.0
• Fix Version/s: 3.0.0-alpha1
• Component/s: security

Environment

AIX
RHEL (64 bit), Ubuntu (64bit), X86

• Target Version/s: 2.7.0
• Assignee: sangamesh
• Reporter: sangamesh
• Created: 02/Jul/14 11:41
• Updated: 12/May/16 18:22
• Resolved: 01/Mar/15 07:23

Description

There are two issues if IBM Java is used while testing hadoop-auth tests.

Looks like there are lot of changes haven been done to properly handle the kerbserose authentication using the JIRA defect: HADOOP-9446 for IBM JAVA.
But their are still some failures can been seen in "Apache Hadoop Common" tests in case of IBM JAVA.
Available patch for HADOOP-10774 will solve the authentication issues plus the path issues.

Two issue issue related to IBM java are.

1) Bad JAAS configuration: unrecognized option: isInitiator
2) Cannot retrieve key from keytab HTTP/[e-mail]

#1 Is caused as isInitiator isn't defined when we use IBM JAVA.
#2 IS caused as, For IBM_JAVA keytab file must be a absolute path with file:// as the prefix for the useKeytab option.
But the file path is relative. This change will work with both openjdk & IBM_JAVA.

Attached patch will resolve all failures happening if we use IBM Java.

Issue Links

• duplicates: HADOOP-10421 Enable Kerberos profiled UTs to run with IBM JAVA