Blocker Description
In high concurrency scenarios the same Knox service principal can ended up requesting two service tickets for HiveServer2's HTTP service principal within the same microsecond. This is being detected on the HiveServer2 side as a replay attack. The fix is to include some concurrency controls in Knox to ensure that this cannot occur. This will introduce some minor serialization but this seems unavoidable.