Support to specify client kerberosAuthType as fromTicketCache

[turboFei]

🔍 Description

The use case:

• 1. the user code running in flink cluster and wrapped by transparent ugi.doAs
• 2. the current UserGroupInfomation is the proxy user not login/real user
• 3. user specify url with kyuubiClientTicketCache but does not work
• 4. the proxy UserGroupInfomation is used and then throw GSS issue.

Caused by: org.apache.kyuubi.shade.org.apache.thrift.transport.TTransportException: GSS initiate failed
    at org.apache.kyuubi.shade.org.apache.thrift.transport.TSaslTransport.sendAndThrowMessage(TSaslTransport.java:232)
    at org.apache.kyuubi.shade.org.apache.thrift.transport.TSaslTransport.open(TSaslTransport.java:316)
    at org.apache.kyuubi.shade.org.apache.thrift.transport.TSaslClientTransport.open(TSaslClientTransport.java:37)
    at org.apache.kyuubi.jdbc.hive.auth.TSubjectTransport.lambda$open$0(TSubjectTransport.java:47)
    at java.security.AccessController.doPrivileged(Native Method)
    at javax.security.auth.Subject.doAs(Subject.java:422)
    at org.apache.kyuubi.jdbc.hive.auth.TSubjectTransport.open(TSubjectTransport.java:42)
    at org.apache.kyuubi.jdbc.hive.KyuubiConnection.openTransport(KyuubiConnection.java:458)
    at org.apache.kyuubi.jdbc.hive.KyuubiConnection.<init>(KyuubiConnection.java:207)
    ... 22 more

The root cause is that, for this case, the result of isHadoopUserGroupInformationDoAs is true.

So, isFromSubjectAuthMode is true.

In this pr, I want to specify the kerberosAuthType to fromTicketCache, and do not check isHadoopUserGroupInformationDoAs.

After this pr, customer can specify kerberosAuthType=fromTicketCache to leverage ticket cache prefer than ugi.doAs.

Issue References 🔗

This pull request fixes #

Describe Your Solution 🔧

Please include a summary of the change and which issue is fixed. Please also include relevant motivation and context. List any dependencies that are required for this change.

Types of changes 🔖

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Test Plan 🧪

Behavior Without This Pull Request ⚰️

Behavior With This Pull Request 🎉

Related Unit Tests

---

Checklist 📝

• This patch was not authored or co-authored using Generative Tooling

Be nice. Be informative.

[codecov-commenter]

Codecov Report

Attention: 18 lines in your changes are missing coverage. Please review.

Comparison is base (4855ffe) 61.27% compared to head (c01a99e) 61.17%.
Report is 3 commits behind head on master.

❗ Current head c01a99e differs from pull request most recent head 6e06500. Consider uploading reports for the commit 6e06500 to get more accurate results

Files	Patch %	Lines
.../org/apache/kyuubi/jdbc/hive/KyuubiConnection.java	27.27%	13 Missing and 3 partials ⚠️
.../kyuubi/jdbc/hive/auth/KerberosAuthentication.java	0.00%	2 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #5961      +/-   ##
============================================
- Coverage     61.27%   61.17%   -0.11%     
  Complexity       23       23              
============================================
  Files           622      622              
  Lines         36882    36896      +14     
  Branches       5014     5014              
============================================
- Hits          22599    22570      -29     
- Misses        11854    11885      +31     
- Partials       2429     2441      +12     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.