Mailing-List: contact common-issues-help@hadoop.apache.org; run by ezmlm
Precedence: bulk
Reply-To: common-issues@hadoop.apache.org
Message-ID: <286251.435031285642654215.JavaMail.jira@thor>
Date: Mon, 27 Sep 2010 22:57:34 -0400 (EDT)
From: "Devaraj Das (JIRA)" <jira@apache.org>
To: common-issues@hadoop.apache.org
Subject: [jira] Commented: (HADOOP-6656) Security framework needs to renew
 Kerberos tickets while the process is running
In-Reply-To: <140327789.427581269326907684.JavaMail.jira@brutus.apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit


    [ https://issues.apache.org/jira/browse/HADOOP-6656?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12915595#action_12915595 ] 

Devaraj Das commented on HADOOP-6656:
-------------------------------------

Well, we started out by trying to make the Refreshable interface work (and Owen had posted a patch on that on this jira). But we couldn't get it working reliably, and hence switched to the kinit based renewal. That seems to be working well so far in our production.

> Security framework needs to renew Kerberos tickets while the process is running
> -------------------------------------------------------------------------------
>
>                 Key: HADOOP-6656
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6656
>             Project: Hadoop Common
>          Issue Type: Bug
>            Reporter: Owen O'Malley
>            Assignee: Devaraj Das
>             Fix For: 0.22.0
>
>         Attachments: 6656-trunk-1.patch, 6656-trunk-2.patch, 6656-trunk-3.patch, 6656-trunk-4.patch, 6656-trunk-4.patch, 6656-trunk-4.patch, 6656-trunk-4.patch, c-6656-y20-internal.patch, refresh.patch
>
>
> While a client process is running, there should be a thread that periodically renews the Kerberos credentials to ensure they don't expire.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.