Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-11604

AbstractKerberosUser should check if ticket is renewable

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 2.0.0-M1, 1.22.0
    • None
    • None

    Description

      Currently the checkTgtAndRelogin method assumes all tickets are renewable and will attempt to call refresh() on the KerberosTicket when reaching > 80% of the ticket lifetime. If the ticket is not renewable the refresh will fail and it will do a full logout/login, same as if the ticket was no longer renewable, but it could be handled more gracefully by not even calling refresh when knowing it won't work.

      Attachments

        Issue Links

          Activity

            People

              bbende Bryan Bende
              bbende Bryan Bende
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 20m
                  20m