IBM JDK is one of the Java that default ticket cache to different than
/tmp/krb5* path. If I recall correctly, most logic had been implemented in UGI
by passing ticketCachePath parameter in 2012-13 time frame. The new addition
will follow the MIT Kerberos lookup order, this is a good improveme
Thank you Steve for your reply.
> I'f you haven't guessed, Kerberos is an eternal support of pain and suffering
Agreed. But it hurt us further when our utilities don’t behave in the way they
are expected to be.
> Any change must be matched with clarifications the hadoop security docs, and
> KD
I'f you haven't guessed, Kerberos is an eternal support of pain and
suffering
Any change must be matched with clarifications the hadoop security docs,
and KDiag extended to provide extra information about the source of the
cache.
One big risk here is over regressions across versions of clients
Hello Devs,
I'm Vipin, a long time Apache Hadoop user and I like to tinker around in my
free time. I've been a MIT Kerberos contributor in my past life.
While chasing the Kerberos credential cache usage in Hadoop, I found out
that UGI code[1] makes use of KRB5CCNAME environment variable to find th
