[HADOOP-13056] Print expected values when rejecting a server's determined principal

• Type: Bug
• Status: Resolved
• Priority: Trivial
• Resolution: Duplicate
• Affects Version/s: 2.5.0
• Component/s: security
• Assignee: Unassigned
• Reporter: Harsh J
• Created: 23/Apr/16 02:05
• Updated: 26/Oct/16 06:59
• Resolved: 26/Oct/16 06:59

Description

When an address-constructed service principal by a client does not match a provided pattern or the configured principal property, the error is very uninformative on what the specific cause is. Currently the only error printed is, in both cases:

 java.lang.IllegalArgumentException: Server has invalid Kerberos principal: hdfs/host.internal@REALM

Issue Links

• duplicates: HADOOP-13503 Improve SaslRpcClient failure logging
• is depended upon by: HADOOP-12649 Improve Kerberos diagnostics and failure handling