Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-10730

Login with kerberos should always set refreshKrb5Config to true

    Details

    • Type: Bug
    • Status: Open
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None

      Description

      When logined with kerberos by "kinit" way, it never refreshes the kerberos configurations. It is really often needed to be refreshed same as "keytab" way(The bug of "keytab" has been fixed by HADOOP-6947).

        Issue Links

          Activity

          Hide
          daryn Daryn Sharp added a comment -

          Out of curiosity, what bug are you seeing? It's not a bad change, but the option should just force a re-read of the /etc/krb5.conf so I'm not sure how it fixed HADOOP-6947.

          Show
          daryn Daryn Sharp added a comment - Out of curiosity, what bug are you seeing? It's not a bad change, but the option should just force a re-read of the /etc/krb5.conf so I'm not sure how it fixed HADOOP-6947 .
          Hide
          ycbai ycbai added a comment -

          Thanks for your reply very much!
          In fact we created a desktop application which is implemented by eclipse rcp. In our tools we need to connect to HDFS with kerberos. I will explain what's the problem we face and how to reproduce it now. First we get the kerberos ticket with "kinit" by kfw in windows system, second start our tool, it's ok we can connect to HDFS successfully. But if the ticket is expired and we regenerate a new one it will not be updated in our tool means we cannot connect to HDFS although there is a available ticket . we have to restart our tool to make it work.

          Show
          ycbai ycbai added a comment - Thanks for your reply very much! In fact we created a desktop application which is implemented by eclipse rcp. In our tools we need to connect to HDFS with kerberos. I will explain what's the problem we face and how to reproduce it now. First we get the kerberos ticket with "kinit" by kfw in windows system, second start our tool, it's ok we can connect to HDFS successfully. But if the ticket is expired and we regenerate a new one it will not be updated in our tool means we cannot connect to HDFS although there is a available ticket . we have to restart our tool to make it work.

            People

            • Assignee:
              Unassigned
              Reporter:
              ycbai ycbai
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:

                Development