[HDFS-14620] RBF: Fix 'not a super user' error when disabling a namespace in kerberos with superuser principal

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Hadoop Flags: Reviewed
• Assignee: luhuachao
• Reporter: luhuachao
• Created: 29/Jun/19 15:40
• Updated: 21/Aug/19 01:49
• Resolved: 04/Jul/19 18:22

Description

use superuser hdfs's principal hdfs-test@EXAMPLE cannot disable namespace with error info below, as the code judge the principal not equals to hdfs, also hdfs is not belong to supergroup.

[hdfs@host1 ~]$ hdfs dfsrouteradmin -nameservice disable ns2 nameservice: hdfs-test@EXAMPLE is not a super user at org.apache.hadoop.hdfs.server.federation.router.RouterPermissionChecker.checkSuperuserPrivilege(RouterPermissionChecker.java:136)