[AMBARI-11002] Ambari does not renew kerberos tickets

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.1.0
• Component/s: ambari-server
• Labels: JAAS
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 07/May/15 18:25
• Updated: 12/May/15 15:45
• Resolved: 12/May/15 15:45

Description

If I go through setup of secure cluster, also execute ambari-server setup-security option #3, there are 2 problems:

1. Ambari does not kinit using the specified principal and keytab
2. If I manually kinit, all is well until the ticket expires - I would expect Ambari to renew ticket prior to expiry.
3. The process uses the interactive user's ticket cache (separate Jira: AMBARI-11001)

Issue Links

• is blocked by: AMBARI-11001 Ambari uses users' interactive ticket cache