Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-3670

Kerberos: Improving long-running streaming jobs

    XMLWordPrintableJSON

    Details

      Description

      We have seen in the past, that Hadoop's delegation tokens are subject to a number of subtle token renewal bugs. In addition, they have a maximum life time that can be worked around but is very inconvenient for the user.

      As per mailing list discussion, a way to work around the maximum life time of DelegationTokens would be to pass the Kerberos principal and key tab upon job submission. A daemon could then periodically renew the ticket.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                vijikarthi Vijay Srinivasaraghavan
                Reporter:
                mxm Maximilian Michels
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: