ambari-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Robert Levas <rle...@hortonworks.com>
Subject Re: Does ambari agent renew kerberos ticket automaticly?
Date Thu, 25 Aug 2016 13:57:21 GMT
Hi Zhang…

The answer to your question depends on who performed the kinit and for what purpose.

The services should all renew their Kerberos tickets automatically. The logic for ticket handling
in each service is in the source code for that particular service. You will need to research
each service to get more information.

Tickets obtained by the Ambari agent are typically done on demand for service or alert checks
are renewed upon use (but tend to be cached for a small amount of time to avoid excessive
load on the KDC).  For alerts, most use resource_management.libraries.functions.curl_krb_request.curl_krb_request
found in …/ambari/ambari-common/src/main/python/resource_management/libraries/functions/curl_krb_request.py.
 For service checks, take a look in the various service_check.py files in the stack definitions
to see what they do.

I hope this helps,
Rob

From: Zhang Ruiqiang <zh.r.q@163.com>
Reply-To: "user@ambari.apache.org" <user@ambari.apache.org>
Date: Thursday, August 25, 2016 at 8:23 AM
To: "user@ambari.apache.org" <user@ambari.apache.org>
Subject: Does ambari agent renew kerberos ticket automaticly?

Hi all:
    When kerberos is enabled, the authed user and service get the ticket use a "kinit" command,
the ticket will expired after about 6 days.
    So, my question is: does ambari agent will renew the ticket automaticly, if so, where
is the source code to implement this.

Thanks.





Mime
View raw message