Tim Armstrong created IMPALA-9359: ------------------------------------- Summary: Recover gracefully from corrupt kerberos credential cache Key: IMPALA-9359 URL: https://issues.apache.org/jira/browse/IMPALA-9359 Project: IMPALA Issue Type: Improvement Components: Security Affects Versions: Impala 3.3.0 Reporter: Tim Armstrong Assignee: Tim Armstrong
# Start up a kerberized Impala cluster # Corrupt the kerberos ticket cache used by impala /tmp/krb5cc_impala_internal # Observe queries fail. The details depend a lot on timing, etc. I have seen communication failures between impalads and with other systems, e.g. HDFS. # The system will stay wedge in this state indefinitely We have seen this happen once in production from /tmp filling up. I prototyped a fix that amounts to re-running Kinit() to blow away the broken credential cache. It needs more work to be production-ready -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org