Hi Maxim, I think your answer is here : https://access.redhat.com/solutions/22956 . But if what you're looking for is to minimize the ticket renewal operation, then you can customize 2 parameters : - Kerberos ticket lifetime - Hadoop ticket renewal interval
Hope this helps. Regards, Loïc CHANEL System Big Data engineer Vision 360 Degrés (Lyon, France) Le mar. 9 oct. 2018 à 20:02, Maxim Neaga <[email protected]> a écrit : > When Kerberizing the cluster with MIT KDC, all tickets are generated as > non-renewable by default (renewable flag is not set). Without the renewal, > new tickets are re-generated upon expiration, but renewal is important > because some long running jobs might actually take advantage of renewing > the ticket so they can continue running. > > How are you dealing with the fact that the tickets are issued as > non-renewable? Is anyone aware of a way to make all tickets generated as > renewable by default? The only way I am aware of is by using "kadmin" as > modprinc -maxrenewlife "1 week" +allow_renewable > hive/[email protected] > but this needs to be done for each principal/host. >
