[HBASE-14580] Make the HBaseMiniCluster compliant with Kerberos

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 1.2.0, 1.3.0, 0.98.16, 2.0.0
• Component/s: security, test
• Hadoop Flags: Reviewed
• Assignee: Nicolas Liochon
• Reporter: Nicolas Liochon
• Created: 08/Oct/15 13:48
• Updated: 01/Jul/22 21:49
• Resolved: 04/Dec/15 19:41

Description

Whne using MiniKDC and the minicluster in a unit test, there is a conflict causeed by HBaseTestingUtility:

  public static User getDifferentUser(final Configuration c,
    final String differentiatingSuffix)
  throws IOException {
   // snip
    String username = User.getCurrent().getName() +
      differentiatingSuffix; <==================== problem here
    User user = User.createUserForTesting(c, username,
        new String[]{"supergroup"});
    return user;
  }

This creates users like securedUser/[e-mail].0, and this does not work.

My fix is to return the current user when Kerberos is set. I don't think that there is another option (any other opinion?). However this user is not in a group so we have logs like 'WARN [IPC Server handler 9 on 61366] security.UserGroupInformation (UserGroupInformation.java:getGroupNames(1521)) - No groups available for user securedUser' I'm not sure of its impact. apurtell, what do you think?