[HADOOP-6527] UserGroupInformation::createUserForTesting clobbers already defined group mappings

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.1.0, 1-win
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Ivan Mitic
• Reporter: Jakob Homan
• Created: 31/Jan/10 05:14
• Updated: 17/Oct/12 18:27
• Resolved: 05/Jul/12 23:50

Description

In UserGroupInformation::createUserForTesting the follow code creates a new groups instance, obliterating any groups that have been previously defined in the static groups field.

    if (!(groups instanceof TestingGroups)) {
      groups = new TestingGroups();
    }

This becomes a problem in tests that start a Mini

{DFS,MR}

Cluster and then create a testing user. The user that started the user (generally the real user running the test) immediately has their groups wiped out and is prevented from accessing files/folders/queues they should be able to. Before the UserGroupInformation.createRemoteUserForTesting, calls to userA.getGroups may return

{"a", "b", "c"}

and immediately after the new fake user is created, the same call will return an empty array.

Issue Links

• relates to: HADOOP-7389 Use of TestingGroups by tests causes subsequent tests to fail