[HADOOP-6947] Kerberos relogin should set refreshKrb5Config to true

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0, 0.22.0
• Fix Version/s: 1.1.0, 0.22.0
• Component/s: security
• Hadoop Flags: Reviewed
• Assignee: Todd Lipcon
• Reporter: Todd Lipcon
• Created: 09/Sep/10 04:42
• Updated: 20/Jun/14 10:15
• Resolved: 26/Oct/10 17:06

Description

In working on securing a daemon that uses two different principals from different threads, I found that I wasn't able to login from a second keytab after I'd logged in from the first. This is because we don't set the refreshKrb5Config in the Configuration for the Krb5LoginModule - hence it won't switch over to the correct keytab file if it's different than the first.

Issue Links

• is related to: HADOOP-10730 Login with kerberos should always set refreshKrb5Config to true