[HADOOP-13890] Maintain HTTP/host as SPNEGO SPN support and fix KerberosName parsing

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.8.0, 3.0.0-alpha2
• Component/s: test
• Hadoop Flags: Reviewed
• Assignee: Xiaoyu Yao
• Reporter: Brahma Reddy Battula
• Created: 11/Dec/16 07:42
• Updated: 21/Oct/19 09:34
• Resolved: 14/Dec/16 22:04

Description

strong textHADOOP-13565 introduced an incompatible check that disallowed principal like HTTP/host from being used as SPNEGO SPN.
This breaks the following test in trunk: TestWebDelegationToken, TestKMS , TestTrashWithSecureEncryptionZones and TestSecureEncryptionZoneWithKMS because they used HTTP/localhost as SPNEGO SPN assuming the default realm. This ticket is opened to bring back the support of HTTP/host as valid SPNEGO SPN.

KerberosName parsing bug was discovered, fixed and included as a necessary part of this ticket along with additional unit test to cover parsing different form of principals.

Jenkins URL
https://builds.apache.org/job/hadoop-qbt-trunk-java8-linux-x86/251/testReport/
https://builds.apache.org/job/PreCommit-HADOOP-Build/11240/testReport/

Issue Links

• is broken by: HADOOP-13565 KerberosAuthenticationHandler#authenticate should not rebuild SPN based on client request
• is related to: HADOOP-13891 KerberosName#KerberosName cannot parse principle without realm