[HADOOP-12664] UGI auto-renewer does not verify kinit availability during initialization

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Labels: supportability
• Assignee: Ray Chiang
• Reporter: Arpit Agarwal
• Created: 21/Dec/15 23:53
• Updated: 09/Jan/17 22:26

Description

UGI auto-renewer does not verify that hadoop.kerberos.kinit.command is in the path during initialization. If not available, the auto-renewal thread will hit an error during TGT renewal. We recently saw a case where it manifests as transient errors during client program execution which can be hard to track down without UGI logging.

It seems like kinit availability should be verified during initialization to make the behavior more predictable.

Issue Links

• is depended upon by: HADOOP-12649 Improve Kerberos diagnostics and failure handling