[
https://issues.apache.org/jira/browse/KYLIN-5442?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Yaguang Jia resolved KYLIN-5442.
--------------------------------
Resolution: Fixed
> Ticket auto-renewal is not supported when kerberos is enabled for the
> real-time feature, resulting in failure of the build job
> ------------------------------------------------------------------------------------------------------------------------------
>
> Key: KYLIN-5442
> URL: https://issues.apache.org/jira/browse/KYLIN-5442
> Project: Kylin
> Issue Type: Bug
> Affects Versions: 5.0-alpha
> Reporter: Yaguang Jia
> Assignee: Yaguang Jia
> Priority: Major
> Fix For: 5.0-alpha
>
> Attachments: KYLIN-5442 Ticket auto-renewal is not supported when
> kerberos is enabled for the real-time feature, resulting in failure of the
> build job (1).pdf
>
>
> Currently, KAFKA opens kerberos with the following two restrictions.
> If using ticketcache authentication
> Kylin cannot automatically update the kerberos ticket on the node where the
> YARN task is located, and needs to provide a method on the operation and
> maintenance side to ensure that the kerberos ticket is automatically updated
> when it expires, which will increase the operation and maintenance costs, so
> expect the Kylin side to automatically update it. If the ticket is not
> updated when it expires, it will cause the real-time task to fail
> 2. If you use keytab authentication file
> Need to add a unified path to the keytab file on Kylin and YARN clusters
> refer to the following work order. The customer wants to avoid adding the
> keytab file on the YARN cluster.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
