[ https://issues.apache.org/jira/browse/IMPALA-9359?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Work on IMPALA-9359 started by Tim Armstrong. --------------------------------------------- > Recover gracefully from corrupt kerberos credential cache > --------------------------------------------------------- > > Key: IMPALA-9359 > URL: https://issues.apache.org/jira/browse/IMPALA-9359 > Project: IMPALA > Issue Type: Improvement > Components: Security > Affects Versions: Impala 3.3.0 > Reporter: Tim Armstrong > Assignee: Tim Armstrong > Priority: Major > Labels: kerberos > > # Start up a kerberized Impala cluster > # Corrupt the kerberos ticket cache used by impala /tmp/krb5cc_impala_internal > # Observe queries fail. The details depend a lot on timing, etc. I have seen > communication failures between impalads and with other systems, e.g. HDFS. > # The system will stay wedge in this state indefinitely > We have seen this happen once in production from /tmp filling up. > I prototyped a fix that amounts to re-running Kinit() to blow away the broken > credential cache. It needs more work to be production-ready -- This message was sent by Atlassian Jira (v8.3.4#803005) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-all-unsubscr...@impala.apache.org For additional commands, e-mail: issues-all-h...@impala.apache.org