hadoop-common-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Geoff Thompson <ge...@bearpeak.com>
Subject Re: kerberos ticket renewal for hadoop services
Date Mon, 30 Jun 2014 00:52:13 GMT
Hi Koert,

I don’t have an example. However, perhaps class org.apache.hadoop.security.UserGroupInformation
has what you need. Some relevant methods are:
reloginFromKeytab()
reloginFromTicketCache()
loginUserFromKeytab(String user, String path)

Geoff

On Jun 29, 2014, at 5:50 PM, Koert Kuipers <koert@tresata.com> wrote:

> how do long lived services such as the namenode or yarn resourcemanager deal with kerberos
ticket expiration for the user that runs the service? 
> 
> do they periodically renew/refresh their tickets by calling SecurityUtil.login(conf,
keytab, user, host)?
> 
> where can i find an example the code that handles this (in NameNode.java its easy to
find the initial login but i cannot find the code that handles with expiration/renewal/refresh
of tickets)? 
> 
> thanks! koert
> 


Mime
View raw message