hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Todd Lipcon (JIRA)" <j...@apache.org>
Subject [jira] Commented: (HADOOP-6947) Kerberos relogin should set refreshKrb5Config to true
Date Tue, 26 Oct 2010 01:12:20 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-6947?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12924804#action_12924804

Todd Lipcon commented on HADOOP-6947:

Ah, I misremembered, I guess we are in the same boat :) Hopefully someone else will pick this
up and commit. Thanks Kan!

> Kerberos relogin should set refreshKrb5Config to true
> -----------------------------------------------------
>                 Key: HADOOP-6947
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6947
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 0.22.0
>            Reporter: Todd Lipcon
>            Assignee: Todd Lipcon
>         Attachments: hadoop-6947-branch20.txt, hadoop-6947.txt
> In working on securing a daemon that uses two different principals from different threads,
I found that I wasn't able to login from a second keytab after I'd logged in from the first.
This is because we don't set the refreshKrb5Config in the Configuration for the Krb5LoginModule
- hence it won't switch over to the correct keytab file if it's different than the first.

This message is automatically generated by JIRA.
You can reply to this email to add a comment to the issue online.

View raw message