Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Message-ID: <17865863.453191285713939770.JavaMail.jira@thor>
Date: Tue, 28 Sep 2010 18:45:39 -0400 (EDT)
From: "Owen O'Malley (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Subject: [jira] Commented: (HADOOP-6656) Security framework needs to renew
 Kerberos tickets while the process is running
In-Reply-To: <140327789.427581269326907684.JavaMail.jira@brutus.apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HADOOP-6656?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12915957#action_12915957 ] 

Owen O'Malley commented on HADOOP-6656:
---------------------------------------

There are two advantages for kinit:
  1. The kinit re-writes the file so that later processes get the refreshed key.
  2. I couldn't get the renew to work at all. It returned without actually renewing anything. I didn't track down why it didn't work.

The disadvantage for kinit is the race condition while you are re-writing the file.

If you want to track down why it didn't work, I can post my patch.

> Security framework needs to renew Kerberos tickets while the process is running
> -------------------------------------------------------------------------------
>
>                 Key: HADOOP-6656
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6656
>             Project: Hadoop Common
>          Issue Type: Bug
>            Reporter: Owen O'Malley
>            Assignee: Devaraj Das
>             Fix For: 0.22.0
>
>         Attachments: 6656-trunk-1.patch, 6656-trunk-2.patch, 6656-trunk-3.patch, 6656-trunk-4.patch, 6656-trunk-4.patch, 6656-trunk-4.patch, 6656-trunk-4.patch, c-6656-y20-internal.patch, refresh.patch
>
>
> While a client process is running, there should be a thread that periodically renews the Kerberos credentials to ensure they don't expire.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.