[HADOOP-12716] KerberosAuthenticator#doSpnegoSequence use incorrect class to determine isKeyTab in JDK8

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.1
• Fix Version/s: 2.8.0, 3.0.0-alpha1
• Component/s: security

Environment

Java 8

• Hadoop Flags: Reviewed
• Assignee: Xiaoyu Yao
• Reporter: Xiaoyu Yao
• Created: 15/Jan/16 23:02
• Updated: 30/Aug/16 01:19
• Resolved: 24/Feb/16 22:15

Description

HADOOP-11287 and HADOOP-10786 has fixed the issue in UserGroupInformation class for JDK8.

However, the logic in KerberosAuthenticator#doSpnegoSequence is not updated. The KerberosKey.class below should be KeyTab.class for JDK8.

if (subject == null
          || (subject.getPrivateCredentials(KerberosKey.class).isEmpty()
              && subject.getPrivateCredentials(KerberosTicket.class).isEmpty())) {