[ 
https://issues.apache.org/jira/browse/HADOOP-9567?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Gary Helmling updated HADOOP-9567:
----------------------------------
    Attachment: HADOOP-9567.branch-2.7.001.patch

This patch changes UserGroupInformation to launch a background thread to 
relogin when logged in from a keytab.  The patch is against branch-2.7, as that 
is where I have been testing.  I can follow up with a patch against trunk.

This also makes the background thread more resilient to login failures, and 
adds the ability to explicitly stop the background thread for both keytab and 
credential cache based logins.

The frequency of update checks is configured via a new property 
"hadoop.user.ticket.renewal.interval".  Setting this to <= 0 disables the 
background thread from launching.

> Provide auto-renewal for keytab based logins
> --------------------------------------------
>
>                 Key: HADOOP-9567
>                 URL: https://issues.apache.org/jira/browse/HADOOP-9567
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: security
>    Affects Versions: 2.0.0-alpha
>            Reporter: Harsh J
>            Assignee: Gary Helmling
>            Priority: Minor
>         Attachments: HADOOP-9567.branch-2.7.001.patch
>
>
> We do a renewal for cached tickets (obtained via kinit before using a Hadoop 
> application) but we explicitly seem to avoid doing a renewal for keytab based 
> logins (done from within the client code) when we could do that as well via a 
> similar thread.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to