Steps to reproduce
- have a topology with JWT federation provider (let's call it tokenbased) and add a valid HDFS UI service in there (the service itself does not really matter, it's just the fastest way in my environment to reproduce the issue). It's important that you make sure knox.token.exp.server-managed is set to true for the JWT federation provider.
- get a Knox delegation token using the KNOXTOKEN service. It's important that you make sure knox.token.exp.server-managed is set to true for the KNOXTOKEN service.
- right after the previous call, try to hit the HDFS UI via the previously created tokenbased topology
The last action fails as the JWT provider receives the following error:
HDFS UI should have been displayed w/o any issue.