Hadoop Common
  1. Hadoop Common
  2. HADOOP-6976

UGI should not try to renew non-renewable kerberos tickets

    Details

    • Type: Bug Bug
    • Status: Open
    • Priority: Major Major
    • Resolution: Unresolved
    • Affects Version/s: 0.22.0
    • Fix Version/s: None
    • Component/s: security
    • Labels:
      None

      Description

      When UserGroupInformation logs in a user from the ticket cache, it spawns a thread which renews the TGT ticket before it expires (HADOOP-6656). This happens even for non-renewable tickets, which results in error messages being printed to the console.

      We should only try to renew the ticket if it has the "Renewable" flag.

        Activity

        Todd Lipcon created issue -
        Hide
        Todd Lipcon added a comment -

        Any thoughts about whether we should issue a warning at login time if the user has a non-renewable ticket? Maybe only if they have a non-renewable ticket which expires within the next hour or two?

        Show
        Todd Lipcon added a comment - Any thoughts about whether we should issue a warning at login time if the user has a non-renewable ticket? Maybe only if they have a non-renewable ticket which expires within the next hour or two?

          People

          • Assignee:
            Unassigned
            Reporter:
            Todd Lipcon
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:

              Development