[HADOOP-7229] Absolute path to kinit in auto-renewal thread

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.21.0, 0.22.0, 0.23.0
• Fix Version/s: 0.22.0
• Component/s: security
• Hadoop Flags: Incompatible change, Reviewed

Release Note

When Hadoop's Kerberos integration is enabled, it is now required that either {{kinit}} be on the path for user accounts running the Hadoop client, or that the {{hadoop.kerberos.kinit.command}} configuration option be manually set to the absolute path to {{kinit}}.

• Assignee: Aaron Myers
• Reporter: Aaron Myers
• Created: 17/Apr/11 19:19
• Updated: 12/Dec/11 06:19
• Resolved: 20/Apr/11 23:53

Description

In the auto-renewal thread for Kerberos credentials in UserGroupInformation, the path to kinit is defaulted to /usr/kerberos/bin/kinit. This is the default path to kinit on RHEL/CentOS for MIT krb5, but not on Debian/Ubuntu (and perhaps others OSes.)