[STORM-2214] Cache Kerberos tickets for long lived Daemons

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0
• Component/s: storm-core
• Assignee: Robert Joseph Evans
• Reporter: Robert Joseph Evans
• Created: 22/Nov/16 16:19
• Updated: 09/Jan/17 18:55
• Resolved: 04/Jan/17 19:15

Description

The UI and supervisors authenticate to nimbus through kerberos. But they initiate a new connection each time they do so, and even use a new Subject for each connection. This means that the client must fetch a new service ticket each time and adds a lot of load on the KDC.

In order to reuse the subject between sessions we propose cacheing the Login instead of creating a new one each time.

Issue Links

• links to: GitHub Pull Request #1793