[HADOOP-13807] UGI renewal thread should be spawn only if the keytab is not external

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Duplicate
• Affects Version/s: 2.7.2, 2.6.4, 3.0.0-alpha1
• Component/s: security
• Assignee: Unassigned
• Reporter: Alejandro Abdelnur
• Created: 10/Nov/16 13:52
• Updated: 16/Oct/17 23:41
• Resolved: 16/Oct/17 23:41

Description

The renewal thread should not be spawned if the keytab is external.

Because of HADOOP-13805 there can be a case that an UGI does not have a keytab because authentication is managed by the host program. In such case we should not spawn the renewal thread.

Currently this is logging a warning "Exception encountered while running the renewal command. Aborting renew thread. " and exiting the thread. The warning may be misleading and running the thread is not really needed.

Issue Links

• duplicates: HADOOP-13805 UGI.getCurrentUser() fails if user does not have a keytab associated
• is related to: HADOOP-13558 UserGroupInformation created from a Subject incorrectly tries to renew the Kerberos ticket
• is related to: HADOOP-13805 UGI.getCurrentUser() fails if user does not have a keytab associated