[ 
https://issues.apache.org/jira/browse/ZOOKEEPER-2295?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14961781#comment-14961781
 ] 

Arshad Mohammad commented on ZOOKEEPER-2295:
--------------------------------------------

The Error message was: nextRefresh: Sat Oct 17 11:13:18 IST 2015 is in the 
past: exiting refresh thread. Check clock sync between this host and KDC - 
(KDC's clock is likely ahead of this host). Manual intervention will be 
required for this client to successfully authenticate. Exiting refresh thread.

> TGT refresh time logic is wrong
> -------------------------------
>
>                 Key: ZOOKEEPER-2295
>                 URL: https://issues.apache.org/jira/browse/ZOOKEEPER-2295
>             Project: ZooKeeper
>          Issue Type: Bug
>            Reporter: Arshad Mohammad
>            Assignee: Arshad Mohammad
>         Attachments: ZOOKEEPER-2295-01.patch
>
>
> When Kerberos is used as authentication mechanism some time TGT is getting 
> expired because it is not refreshed timely.
> The scenario is as follow:
> suppose now=8 (the current milliseconds)
> next refresh time= 10
> TGT expire time= 9
> *Current behaviour:* Error is logged and TGT refresh thread exits.
> *Expected behaviour:* TGT should be refreshed immediately(now) instead of 
> nextRefreshTime



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to