Mailing-List: contact user-help@hbase.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@hbase.apache.org
MIME-Version: 1.0
In-Reply-To: <CAAZxR4PwkA1rtB-ZUYgXX9L6frU=ZpuDaFKdogSUvoWMk_DMcA@mail.gmail.com>
References: <CAAZxR4P1VAxGiky8kfD8L=PYrUxdNq9PF3kStwv3wg0mdk__Jw@mail.gmail.com>
 <CALte62x49ftEyyuu6MSgodGL2ZnQbPSxdoNvhP_XZpj1EjXvKA@mail.gmail.com>
 <CAAZxR4Noe01bWAyzRSBaDPvqEyQTsYhyvZgHUYj+90D2OKQTNQ@mail.gmail.com>
 <CAHkeaHW2dp1e39PnpgJhrM=VqFWWMLf7NSH6ubZY0i1WuPDFzw@mail.gmail.com> <CAAZxR4PwkA1rtB-ZUYgXX9L6frU=ZpuDaFKdogSUvoWMk_DMcA@mail.gmail.com>
From: Jerry He <jerryjch@gmail.com>
Date: Sun, 25 Jun 2017 22:34:31 -0700
Message-ID: <CAHkeaHWtdUaV1b=WFT3HzLtY5q5y2Qww9a0HiCAmYN=WzszodQ@mail.gmail.com>
Subject: Re: Thrift server kerberos ticket refresh
To: "user@hbase.apache.org" <user@hbase.apache.org>
Content-Type: text/plain; charset="UTF-8"
archived-at: Mon, 26 Jun 2017 05:35:00 -0000

Let's go to the JIRA ticket you opened.
Please describe the problem more over there.  For example, give the
exception or stack trace and where it comes from.

Thanks,

Jerry

On Wed, Jun 21, 2017 at 12:15 AM, Steen Manniche <boxunbox@gmail.com> wrote:
> I understand that the ticket renewal logic might be called indirectly
> through some process/module that the thrift server is importing or
> using, but after a thorough spelunking around the code-base, I was not
> able to find any path to ticket renewal logic. Which is why I turned
> to the list :)
>
> On Wed, Jun 21, 2017 at 5:06 AM, Jerry He <jerryjch@gmail.com> wrote:
>> The right code can be hard to find and may not be even in the Thrift module.
>>
>> Did you encounter any problem, e.g. the Thrift server giving out errors due
>> to expired Kerberos ticket?
>>
>> Thanks,
>>
>> Jerry
>>
>> On Tue, Jun 20, 2017 at 11:05 AM, Steen Manniche <boxunbox@gmail.com> wrote:
>>
>>> Hi Ted,
>>>
>>> thanks for the feedback. I created HBASE-18243
>>>
>>> Best regards,
>>> Steen
>>>
>>> On Tue, Jun 20, 2017 at 5:03 PM, Ted Yu <yuzhihong@gmail.com> wrote:
>>> > I didn't find ticket renewal logic either.
>>> >
>>> > I think we can use facility similar to AuthUtil#getAuthChore().
>>> >
>>> > Mind logging a JIRA ?
>>> >
>>> > On Tue, Jun 20, 2017 at 4:17 AM, Steen Manniche <boxunbox@gmail.com>
>>> wrote:
>>> >
>>> >> Hi all,
>>> >>
>>> >> I have been looking through the hbase-thrift code looking for where
>>> >> the server performs renewals of kerberos tickets for the provided
>>> >> principal/keytab. I cannot seem to find any trace of this?
>>> >>
>>> >> As an example, the hadoop-common provides the class
>>> >> UserGroupInformation, which exposes the method
>>> >> checkTGTAndReloginFromKeytab. I can see that the ThriftServerRunner
>>> >> has a handle to the class
>>> >> (https://github.com/apache/hbase/blob/master/hbase-
>>> >> thrift/src/main/java/org/apache/hadoop/hbase/thrift/
>>> >> ThriftServerRunner.java#L205),
>>> >> but I do not see the ticket renewal logic being called anywhere. Am I
>>> >> missing something about how this works?
>>> >>
>>> >>
>>> >> Thanks for the time and best regards,
>>> >> Steen
>>> >>
>>>