[HADOOP-17432] [JDK 16] KerberosUtil#getOidInstance is broken by JEP 396

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.1, 3.4.0
• Fix Version/s: 3.3.1, 3.4.0
• Component/s: auth
• Labels: pull-request-available

Environment

Java 16-ea+28

• Target Version/s: 3.3.1, 3.4.0
• Assignee: Akira Ajisaka Assign to me
• Reporter: Akira Ajisaka
• Created: 14/Dec/20 01:49
• Updated: 27/Jan/24 06:09
• Resolved: 05/Feb/21 07:17

Description

JEP 396 (Strongly Encapsulate JDK Internals by Default) has been migrated since Java 16 EA Build 28. Calling the internal APIs (except the critical APIs such as sun.misc.Unsafe) are banned by default.

[INFO] Running org.apache.hadoop.security.authentication.server.TestAltKerberosAuthenticationHandler
[ERROR] Tests run: 16, Failures: 0, Errors: 2, Skipped: 0, Time elapsed: 17.323 s <<< FAILURE! - in org.apache.hadoop.security.authentication.server.TestAltKerberosAuthenticationHandler
[ERROR] testNonDefaultNonBrowserUserAgentAsNonBrowser(org.apache.hadoop.security.authentication.server.TestAltKerberosAuthenticationHandler)  Time elapsed: 1.272 s  <<< ERROR!
java.lang.IllegalAccessException: class org.apache.hadoop.security.authentication.util.KerberosUtil cannot access class sun.security.jgss.GSSUtil (in module java.security.jgss) because module java.security.jgss does not export sun.security.jgss to unnamed module @48967c8b
	at java.base/jdk.internal.reflect.Reflection.newIllegalAccessException(Reflection.java:385)
	at java.base/java.lang.reflect.AccessibleObject.checkAccess(AccessibleObject.java:687)
	at java.base/java.lang.reflect.Field.checkAccess(Field.java:1096)
	at java.base/java.lang.reflect.Field.get(Field.java:417)
	at org.apache.hadoop.security.authentication.util.KerberosUtil.getOidInstance(KerberosUtil.java:90)

Issue Links

• breaks: HADOOP-17644 Add back the exceptions removed by HADOOP-17432 for compatibility
• links to: GitHub Pull Request #2546