HDFS-7798. Checkpointing failure caused by shared KerberosAuthenticator. (Chengbing Liu via yliu)

hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt

@@ -957,6 +957,9 @@ Release 2.7.0 - UNRELEASED
     HDFS-4625. BKJM doesn't take advantage of speculative reads. (Rakesh R
     via aajisaka)
 
+    HDFS-7798. Checkpointing failure caused by shared KerberosAuthenticator.
+    (Chengbing Liu via yliu)
+
     BREAKDOWN OF HDFS-7584 SUBTASKS AND RELATED JIRAS
 
       HDFS-7720. Quota by Storage Type API, tools and ClientNameNode

hadoop-hdfs-project/hadoop-hdfs/src/main/java/org/apache/hadoop/hdfs/web/URLConnectionFactory.java

@@ -49,9 +49,6 @@ import com.google.common.annotations.VisibleForTesting;
 public class URLConnectionFactory {
   private static final Log LOG = LogFactory.getLog(URLConnectionFactory.class);
 
-  /** SPNEGO authenticator */
-  private static final KerberosUgiAuthenticator AUTH = new KerberosUgiAuthenticator();
-
   /**
    * Timeout for socket connects and reads
    */
@@ -161,8 +158,8 @@ public class URLConnectionFactory {
       }
       UserGroupInformation.getCurrentUser().checkTGTAndReloginFromKeytab();
       final AuthenticatedURL.Token authToken = new AuthenticatedURL.Token();
-      return new AuthenticatedURL(AUTH, connConfigurator).openConnection(url,
-          authToken);
+      return new AuthenticatedURL(new KerberosUgiAuthenticator(),
+          connConfigurator).openConnection(url, authToken);
     } else {
       if (LOG.isDebugEnabled()) {
         LOG.debug("open URL connection");