[HDFS-5842] Cannot create hftp filesystem when using a proxy user ugi and a doAs on a secure cluster

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.3.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Jing Zhao
• Reporter: Arpit Gupta
• Created: 09/Jan/14 05:06
• Updated: 24/Feb/14 20:57
• Resolved: 29/Jan/14 22:14

Description

Noticed this while debugging issues in another application. We saw an error when trying to do a FileSystem.get using an hftp file system on a secure cluster using a proxy user ugi.

This is a small snippet used

 FileSystem testFS = ugi.doAs(new PrivilegedExceptionAction<FileSystem>() {
            @Override
            public FileSystem run() throws IOException {
                return FileSystem.get(hadoopConf);
            }
        });

The same code worked for hdfs and webhdfs but not for hftp when the ugi used was UserGroupInformation.createProxyUser