[HADOOP-10848] Cleanup calling of sun.security.krb5.Config

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Assignee: Akira Ajisaka
• Reporter: Kai Zheng
• Created: 16/Jul/14 02:36
• Updated: 14/Apr/22 02:28
• Resolved: 08/Apr/19 01:04

Description

As was told by Max (Oracle), JDK9 is likely to block all accesses to sun.* classes.

In ./hadoop-common-project/hadoop-auth/src/main/java/org/apache/hadoop/security/authentication/util/KerberosUtil.java,

sun.security.krb5.Config is called against the method getDefaultRealm() to get default Kerberos realm. It was proposed to remove the call by Oracle:

new javax.security.auth.kerberos.KerberosPrincipal("dummy").toString().split("@")[1]

Issue Links

• is depended upon by: SOLR-10199 Solr's Kerberos functionality does not work in Java9 due to dependency on hadoop's AuthenticationFilter which attempt access to JVM protected classes
• is duplicated by: HDDS-1838 Fix illegal reflective access warning in KerberosUtil
• is related to: SPARK-24417 Build and Run Spark on JDK11
• is related to: HADOOP-16935 Backport HADOOP-10848. Cleanup calling of sun.security.krb5.Config to branch-3.2
• is related to: HADOOP-10847 Remove the usage of sun.security.x509.* in testing code
• relates to: HBASE-25058 Export necessary modules when running under JDK11
• relates to: HADOOP-15338 Java 11 runtime support