[HADOOP-17342] Creating a token identifier should not do kerberos name resolution

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.10.1, 3.4.0
• Fix Version/s: 3.2.2, 3.3.1, 3.4.0, 2.10.2, 3.2.3
• Component/s: common
• Assignee: Jim Brennan
• Reporter: Jim Brennan
• Created: 03/Nov/20 15:28
• Updated: 10/Jun/21 07:56
• Resolved: 05/Nov/20 22:17

Description

This problem was found and fixed internally for us by Daryn Sharp.

Creating a token identifier tries to do auth_to_local short username translation. The authentication process creates a blank token identifier for deserializing the wire format. Attempting to resolve an empty username is useless work.

Discovered the issue during fair call queue backoff testing. The readers are unnecessary slowed down by this bug.