Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-13722

Kerberos ticket renewal issue due static thread pool in Iceberg library

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.28.0, 2.0.0
    • None
    • None

    Description

      There is a static worker Thread Pool in Iceberg which is used in multiple parts of the library:
      https://github.com/apache/iceberg/blob/main/core/src/main/java/org/apache/iceberg/util/ThreadPools.java#L45
       
      When the PutIceberg processor is started for the first time then this Thread Pool will be initialized with the initial Kerberos user and the processor will work properly until it is not restarted. When restart happens then a new Kerberos user will be initialized but the Thread Pool will still reference to the original Kerberos user so when the Kerberos ticket expires for the first user then it won't be able to renew it.
      Same issue happens when multiple processors are using the same classloader and the processor which initialized the Thread Pool is stopped then the other processors will start to fail.

      Attachments

        Issue Links

          Activity

            People

              mbathori Mark Bathori
              mbathori Mark Bathori
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 1h 10m
                  1h 10m