final Token<DelegationTokenIdentifier> token = generateDelegationToken(
"owner", ugi.getShortUserName());
ugi.doAs(new PrivilegedExceptionAction<Object>() {
public Object run() throws Exception {
try {
jt.renewDelegationToken(token);
Assert
.fail("Delegation token should not be renewed without Kerberos authentication");
} catch (IOException e) {
// success
}