accumulo-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Josh Elser (JIRA)" <>
Subject [jira] [Created] (ACCUMULO-4069) Services failing to renew Kerberos ticket
Date Thu, 03 Dec 2015 01:08:10 GMT
Josh Elser created ACCUMULO-4069:

             Summary: Services failing to renew Kerberos ticket
                 Key: ACCUMULO-4069
             Project: Accumulo
          Issue Type: Bug
          Components: gc, master, monitor, tserver
    Affects Versions: 1.7.0
            Reporter: Josh Elser
            Assignee: Josh Elser
            Priority: Blocker
             Fix For: 1.7.1

Got a report from a user that Accumulo services were dying after a period of time that was
suspiciously similar to the Kerberos ticket lifetime.

A Kerberos ticket lifetime is the amount of time that the ticket is valid (obtained from password
or keytab). There is also a renewable lifetime associate with each ticket. Within the renewable
lifetime duration, clients can "renew" their ticket for another "ticket lifetime" duration.
For each, a lifetime of one day and a renewable lifetime of seven days: a ticket is valid
for one day, but clients can renew that ticket up to 6 days after the original ticket expires.

I do recall seeing a line of code in our services that has a comment saying it should spawn
a thread specifically for this purpose, but I don't ever recall seeing that thread in thread
dumps. My hunch is that the thread just isn't getting launched and we're not doing renewals

This message was sent by Atlassian JIRA

View raw message