Uploaded image for project: 'Accumulo'
  1. Accumulo
  2. ACCUMULO-4069

Services failing to renew Kerberos ticket

    XMLWordPrintableJSON

    Details

      Description

      Got a report from a user that Accumulo services were dying after a period of time that was suspiciously similar to the Kerberos ticket lifetime.

      A Kerberos ticket lifetime is the amount of time that the ticket is valid (obtained from password or keytab). There is also a renewable lifetime associate with each ticket. Within the renewable lifetime duration, clients can "renew" their ticket for another "ticket lifetime" duration. For each, a lifetime of one day and a renewable lifetime of seven days: a ticket is valid for one day, but clients can renew that ticket up to 6 days after the original ticket expires.

      I do recall seeing a line of code in our services that has a comment saying it should spawn a thread specifically for this purpose, but I don't ever recall seeing that thread in thread dumps. My hunch is that the thread just isn't getting launched and we're not doing renewals

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                elserj Josh Elser
                Reporter:
                elserj Josh Elser
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h 20m
                  1h 20m