[STORM-2214] Cache Kerberos tickets for long lived Daemons - ASF JIRA

Log work

Agile Board

Rank to Top

Rank to Bottom

Attach files

Attach Screenshot

Bulk Copy Attachments

Bulk Move Attachments

Voters

Watch issue

Watchers

Create sub-task

Convert to sub-task

Link

Clone

Labels

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Resolved
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 2.0.0
Component/s: storm-core
Labels:
None

Description

The UI and supervisors authenticate to nimbus through kerberos. But they initiate a new connection each time they do so, and even use a new Subject for each connection. This means that the client must fetch a new service ticket each time and adds a lot of load on the KDC.

In order to reuse the subject between sessions we propose cacheing the Login instead of creating a new one each time.