This is an automated email from the ASF dual-hosted git repository.
pdallig pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/zeppelin.git
The following commit(s) were added to refs/heads/master by this push:
new 3f1727462e [ZEPPELIN-5908] JDBCSecurityImpl should relogin when
authType='kerberos' to void kerberos ticket expired (#4597)
3f1727462e is described below
commit 3f1727462eefdeab06352e2b548bef6a0f7e5b42
Author: Xie Yi <[email protected]>
AuthorDate: Fri May 12 21:02:31 2023 +0800
[ZEPPELIN-5908] JDBCSecurityImpl should relogin when authType='kerberos' to
void kerberos ticket expired (#4597)
Co-authored-by: Yi Xie <[email protected]>
---
.../main/java/org/apache/zeppelin/jdbc/security/JDBCSecurityImpl.java | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git
a/jdbc/src/main/java/org/apache/zeppelin/jdbc/security/JDBCSecurityImpl.java
b/jdbc/src/main/java/org/apache/zeppelin/jdbc/security/JDBCSecurityImpl.java
index 9d83a1feaf..663178e704 100644
--- a/jdbc/src/main/java/org/apache/zeppelin/jdbc/security/JDBCSecurityImpl.java
+++ b/jdbc/src/main/java/org/apache/zeppelin/jdbc/security/JDBCSecurityImpl.java
@@ -58,8 +58,9 @@ public class JDBCSecurityImpl {
UserGroupInformation.loginUserFromKeytab(principal, keytab);
LOGGER.info("Login successfully via keytab: {} and principal: {}",
keytab, principal);
} else {
+
UserGroupInformation.getCurrentUser().checkTGTAndReloginFromKeytab();
LOGGER.info("The user has already logged in using Keytab and
principal, " +
- "no action required");
+ "will check tgt and whether to re-login");
}
} catch (IOException e) {
LOGGER.error("Failed to get either keytab location or principal name
in the " +
