HADOOP-6612. Protocols RefreshUserToGroupMappingsProtocol and RefreshAuthorizationPolicyProtocol will fail with security enabled (boryas)

git-svn-id: https://svn.apache.org/repos/asf/hadoop/common/trunk@944397 13f79535-47bb-0310-9956-ffa450edef68

CHANGES.txt

@@ -12,6 +12,9 @@ Trunk (unreleased changes)
 
   BUG FIXES
 
+    HADOOP-6612.  Protocols RefreshUserToGroupMappingsProtocol and 
+    RefreshAuthorizationPolicyProtocol will fail with security enabled (boryas)
+
     HADOOP-6764. Remove verbose logging from the Groups class. (Boris Shkolnik)
 
     HADOOP-6730. Bug in FileContext#copy and provide base class for FileContext 

src/java/org/apache/hadoop/fs/CommonConfigurationKeys.java

@@ -152,5 +152,7 @@ public class CommonConfigurationKeys {
    */
   public final static String HADOOP_CLUSTER_ADMINISTRATORS_PROPERTY =
       "hadoop.cluster.administrators";
+  public static final String  HADOOP_SECURITY_SERVICE_USER_NAME_KEY = 
+    "hadoop.security.service.user.name.key";
 }
 

src/java/org/apache/hadoop/ipc/Client.java

@@ -255,6 +255,11 @@ public class Client {
         if (krbInfo != null) {
           String serverKey = krbInfo.serverPrincipal();
           if (serverKey != null) {
+            if(LOG.isDebugEnabled()) {
+              LOG.info("server principal key for protocol="
+                  + protocol.getCanonicalName() + " is " + serverKey + 
+                  " and val =" + conf.get(serverKey));
+            }
             serverPrincipal = conf.get(serverKey);
           }
         }

src/java/org/apache/hadoop/security/RefreshUserToGroupMappingsProtocol.java

@@ -20,12 +20,16 @@ package org.apache.hadoop.security;
 import java.io.IOException;
 
 import org.apache.hadoop.conf.Configuration;
+import org.apache.hadoop.fs.CommonConfigurationKeys;
 import org.apache.hadoop.ipc.VersionedProtocol;
+import org.apache.hadoop.security.KerberosInfo;
 
 /**
  * Protocol use 
  *
  */
+@KerberosInfo(
+    serverPrincipal=CommonConfigurationKeys.HADOOP_SECURITY_SERVICE_USER_NAME_KEY)
 public interface RefreshUserToGroupMappingsProtocol extends VersionedProtocol {
   
   /**

src/java/org/apache/hadoop/security/authorize/RefreshAuthorizationPolicyProtocol.java

@@ -19,11 +19,15 @@ package org.apache.hadoop.security.authorize;
 
 import java.io.IOException;
 
+import org.apache.hadoop.fs.CommonConfigurationKeys;
 import org.apache.hadoop.ipc.VersionedProtocol;
+import org.apache.hadoop.security.KerberosInfo;
 
 /**
  * Protocol which is used to refresh the authorization policy in use currently.
  */
+@KerberosInfo(
+    serverPrincipal=CommonConfigurationKeys.HADOOP_SECURITY_SERVICE_USER_NAME_KEY)
 public interface RefreshAuthorizationPolicyProtocol extends VersionedProtocol {
   
   /**