HDDS-10803. HttpServer fails to start with wildcard principal

[adoroszlai]

What changes were proposed in this pull request?

Fix:

Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/kerby/kerberos/kerb/keytab/Keytab
  at org.apache.hadoop.security.authentication.util.KerberosUtil.getPrincipalNames(KerberosUtil.java:238)
  at org.apache.hadoop.security.authentication.util.KerberosUtil.getPrincipalNames(KerberosUtil.java:257)
  at org.apache.hadoop.security.authentication.server.KerberosAuthenticationHandler.init(KerberosAuthenticationHandler.java:163)
  at org.apache.hadoop.security.authentication.server.AuthenticationFilter.initializeAuthHandler(AuthenticationFilter.java:194)
  at org.apache.hadoop.security.authentication.server.AuthenticationFilter.init(AuthenticationFilter.java:180)
  ...
  at org.apache.hadoop.hdds.server.http.HttpServer2.start(HttpServer2.java:1184)
  at org.apache.hadoop.hdds.server.http.BaseHttpServer.start(BaseHttpServer.java:322)

Hadoop's KerberosUtil requires kerb-util to be on the classpath to use Keytab. However, this code path is hit only in specific cases. One of these is when HTTP principal is set to wildcard (*).

Similarly, kerb-core may be required for using PrincipalName.

https://issues.apache.org/jira/browse/HDDS-10803

How was this patch tested?

The patch changes Recon's HTTP principal in ozonesecure acceptance test environment to * to have coverage for this case.

Also verified kerb-util is on the classpath (logged in STARTUP_MSG).

CI:
https://github.com/adoroszlai/ozone/actions/runs/8943525426/job/24569000209
https://github.com/adoroszlai/ozone/actions/runs/8943794693 (with dependency check fixed)

[adoroszlai]

@tanvipenumudy please review

[smengcl]

Thanks @adoroszlai . Can confirm kerb-util is in classpath files now:

$ sed 's/:/\n/g' ./share/ozone/classpath/ozone-datanode.classpath | grep kerb
$HDDS_LIB_JARS_DIR/kerb-core-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-pkix-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-asn1-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-util-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerb-util-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-config-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerb-crypto-1.0.1.jar

$ sed 's/:/\n/g' ./share/ozone/classpath/ozone-manager.classpath | grep kerb 
$HDDS_LIB_JARS_DIR/kerb-core-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-pkix-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-asn1-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-util-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerb-util-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerby-config-1.0.1.jar
$HDDS_LIB_JARS_DIR/kerb-crypto-1.0.1.jar

etc.

[adoroszlai]

Thanks @smengcl for the review.