[HDFS-14052] RBF: Use Router keytab for WebHDFS

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: HDFS-13891
• Hadoop Flags: Reviewed
• Assignee: CR Hota
• Reporter: Íñigo Goiri
• Created: 05/Nov/18 18:42
• Updated: 24/Jun/19 18:03
• Resolved: 26/Feb/19 02:17

Description

When the RouterHttpServer starts it does:

    NameNodeHttpServer.initWebHdfs(conf, httpAddress.getHostName(), httpServer,
        RouterWebHdfsMethods.class.getPackage().getName());

This function is in the NN and is pretty generic.
However, it then calls to NameNodeHttpServer#getAuthFilterParams, which does:

    String httpKeytab = conf.get(DFSUtil.getSpnegoKeytabKey(conf,
        DFSConfigKeys.DFS_NAMENODE_KEYTAB_FILE_KEY));

In most cases, the regular web keytab will kick in, but we should make this a parameter and load the Router one just in case.

Issue Links

• blocks: HDFS-13972 RBF: Support for Delegation Token (WebHDFS)
• is blocked by: HDFS-14051 Refactor NameNodeHttpServer#initWebHdfs to specify local keytab
• is blocked by: HDFS-14307 RBF: Update tests to use internal Whitebox instead of Mockito
• is related to: HDFS-13972 RBF: Support for Delegation Token (WebHDFS)
• relates to: HDFS-12284 RBF: Support for Kerberos authentication