impala-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sailesh Mukil (Code Review)" <>
Subject [Impala-ASF-CR] IMPALA-4129: Use KRPC's Kinit code to avoid expensive fork
Date Fri, 01 Sep 2017 20:37:19 GMT
Sailesh Mukil has uploaded a new change for review.

Change subject: IMPALA-4129: Use KRPC's Kinit code to avoid expensive fork

IMPALA-4129: Use KRPC's Kinit code to avoid expensive fork

Impala currently kinits by forking off a subprocess. This
has proved to be expensive in many cases since the subprocess
tries to reserve as much memory as Impala is currently using
which can be quite a lot.

This patch adds a flag called 'use_krpc_kinit' that defaults to
true. When it's true, it uses the Kudu security library's kinit code
that programatically uses the krb5 library to kinit.
When it's false, we run our current path which kicks off the
kinit-thread and forks off a kinit process periodically to reacquire
tickets based on FLAGS_kerberos_reinit_interval.

Testing: Verified with thrift-server-test and also manually on a
live kerberized cluster.

Change-Id: I9cea56cc6e7412d87f4c2e92399a2f91ea6af6c7
M CMakeLists.txt
M be/src/kudu/security/CMakeLists.txt
M be/src/kudu/security/
M be/src/kudu/security/test/
M be/src/rpc/CMakeLists.txt
M be/src/rpc/auth-provider.h
M be/src/rpc/
M be/src/rpc/
M bin/
A cmake_modules/FindKerberosPrograms.cmake
10 files changed, 203 insertions(+), 22 deletions(-)

  git pull ssh:// refs/changes/38/7938/1
To view, visit
To unsubscribe, visit

Gerrit-MessageType: newchange
Gerrit-Change-Id: I9cea56cc6e7412d87f4c2e92399a2f91ea6af6c7
Gerrit-PatchSet: 1
Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-Owner: Sailesh Mukil <>

View raw message