HDDS-13496. Intermittent fork exit timeout in TestOzoneClientFactory (apache#8853)

Author: adoroszlai

hadoop-ozone/integration-test/src/test/java/org/apache/hadoop/ozone/client/TestOzoneClientFactory.java

@@ -35,6 +35,7 @@
 
 import java.io.File;
 import java.io.IOException;
+import java.security.PrivilegedExceptionAction;
 import java.time.Instant;
 import java.util.HashMap;
 import java.util.UUID;
@@ -62,6 +63,8 @@
 import org.apache.hadoop.ozone.TestDataUtil;
 import org.apache.hadoop.ozone.client.BucketArgs;
 import org.apache.hadoop.ozone.client.OzoneBucket;
+import org.apache.hadoop.ozone.client.OzoneClient;
+import org.apache.hadoop.ozone.client.OzoneClientFactory;
 import org.apache.hadoop.ozone.client.OzoneKey;
 import org.apache.hadoop.ozone.client.OzoneVolume;
 import org.apache.hadoop.ozone.client.SecretKeyTestClient;
@@ -84,6 +87,7 @@
 import org.apache.hadoop.ozone.protocol.proto.OzoneManagerProtocolProtos.S3Authentication;
 import org.apache.hadoop.ozone.protocol.proto.OzoneManagerProtocolProtos.Status;
 import org.apache.hadoop.ozone.protocol.proto.OzoneManagerProtocolProtos.VolumeInfo;
+import org.apache.hadoop.security.AccessControlException;
 import org.apache.hadoop.security.UserGroupInformation;
 import org.apache.ozone.test.GenericTestUtils;
 import org.junit.jupiter.api.AfterAll;
@@ -425,6 +429,21 @@ public void testS3Auth() throws Exception {
     assertEquals(Status.INVALID_TOKEN, omResponse.getStatus());
   }
 
+  @Test
+  public void testRemoteException() {
+    UserGroupInformation realUser = UserGroupInformation.createRemoteUser("realUser");
+    UserGroupInformation proxyUser = UserGroupInformation.createProxyUser("user", realUser);
+
+    assertThrows(AccessControlException.class, () -> {
+      proxyUser.doAs((PrivilegedExceptionAction<Void>) () -> {
+        try (OzoneClient ozoneClient = OzoneClientFactory.getRpcClient(getCluster().getConf())) {
+          ozoneClient.getObjectStore().listVolumes("/");
+        }
+        return null;
+      });
+    });
+  }
+
   @Test
   @Override
   // Restart DN doesn't work with security enabled.