Return-Path: X-Original-To: apmail-sentry-commits-archive@minotaur.apache.org Delivered-To: apmail-sentry-commits-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 1FA2611DC2 for ; Thu, 11 Sep 2014 21:19:55 +0000 (UTC) Received: (qmail 25380 invoked by uid 500); 11 Sep 2014 21:19:55 -0000 Delivered-To: apmail-sentry-commits-archive@sentry.apache.org Received: (qmail 25331 invoked by uid 500); 11 Sep 2014 21:19:55 -0000 Mailing-List: contact commits-help@sentry.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@sentry.incubator.apache.org Delivered-To: mailing list commits@sentry.incubator.apache.org Received: (qmail 25321 invoked by uid 99); 11 Sep 2014 21:19:55 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 11 Sep 2014 21:19:55 +0000 X-ASF-Spam-Status: No, hits=-2001.7 required=5.0 tests=ALL_TRUSTED,RP_MATCHES_RCVD X-Spam-Check-By: apache.org Received: from [140.211.11.3] (HELO mail.apache.org) (140.211.11.3) by apache.org (qpsmtpd/0.29) with SMTP; Thu, 11 Sep 2014 21:19:53 +0000 Received: (qmail 24219 invoked by uid 99); 11 Sep 2014 21:19:33 -0000 Received: from tyr.zones.apache.org (HELO tyr.zones.apache.org) (140.211.11.114) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 11 Sep 2014 21:19:33 +0000 Received: by tyr.zones.apache.org (Postfix, from userid 65534) id 23C3A9BDB0B; Thu, 11 Sep 2014 21:19:31 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: brock@apache.org To: commits@sentry.incubator.apache.org Message-Id: <5b8a8b7b2293449d810cbb9670b5ddd1@git.apache.org> X-Mailer: ASF-Git Admin Mailer Subject: git commit: SENTRY-431 - Sentry db provider client should attempt to refresh kerberos ticket before connection (Prasad via Brock) Date: Thu, 11 Sep 2014 21:19:31 +0000 (UTC) X-Virus-Checked: Checked by ClamAV on apache.org Repository: incubator-sentry Updated Branches: refs/heads/master 70c47e803 -> 67f84187c SENTRY-431 - Sentry db provider client should attempt to refresh kerberos ticket before connection (Prasad via Brock) Project: http://git-wip-us.apache.org/repos/asf/incubator-sentry/repo Commit: http://git-wip-us.apache.org/repos/asf/incubator-sentry/commit/67f84187 Tree: http://git-wip-us.apache.org/repos/asf/incubator-sentry/tree/67f84187 Diff: http://git-wip-us.apache.org/repos/asf/incubator-sentry/diff/67f84187 Branch: refs/heads/master Commit: 67f84187c3c04af33a938c5be6a2086632c79385 Parents: 70c47e8 Author: Brock Noland Authored: Thu Sep 11 14:19:20 2014 -0700 Committer: Brock Noland Committed: Thu Sep 11 14:19:20 2014 -0700 ---------------------------------------------------------------------- .../provider/db/service/thrift/SentryPolicyServiceClient.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/incubator-sentry/blob/67f84187/sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryPolicyServiceClient.java ---------------------------------------------------------------------- diff --git a/sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryPolicyServiceClient.java b/sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryPolicyServiceClient.java index 6895927..6252051 100644 --- a/sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryPolicyServiceClient.java +++ b/sentry-provider/sentry-provider-db/src/main/java/org/apache/sentry/provider/db/service/thrift/SentryPolicyServiceClient.java @@ -21,7 +21,6 @@ package org.apache.sentry.provider.db.service.thrift; import java.io.IOException; import java.net.InetSocketAddress; import java.security.PrivilegedExceptionAction; -import java.util.HashSet; import java.util.List; import java.util.Map; import java.util.Set; @@ -96,6 +95,9 @@ public class SentryPolicyServiceClient { baseOpen(); } else { try { + if (ugi.isFromKeytab()) { + ugi.checkTGTAndReloginFromKeytab(); + } ugi.doAs(new PrivilegedExceptionAction() { public Void run() throws TTransportException { baseOpen();