[HADOOP-9698] RPCv9 client must honor server's SASL negotiate response

• Type: Sub-task
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.1.0-beta, 3.0.0-alpha1
• Fix Version/s: 2.1.0-beta
• Component/s: ipc
• Target Version/s: 2.1.0-beta
• Hadoop Flags: Incompatible change, Reviewed
• Release Note: The RPC client now waits for the Server's SASL negotiate response before instantiating its SASL client.
• Assignee: Daryn Sharp
• Reporter: Daryn Sharp
• Created: 03/Jul/13 17:31
• Updated: 12/May/16 18:25
• Resolved: 29/Jul/13 14:55

Description

As of HADOOP-9421, a RPCv9 server will advertise its authentication methods. This is meant to support features such as IP failover, better token selection, and interoperability in a heterogenous security environment.

Currently the client ignores the negotiate response and just blindly attempts to authenticate instead of choosing a mutually agreeable auth method.