cdmikechen commented on issue #2100:
URL: https://github.com/apache/hudi/issues/2100#issuecomment-755797895


   @bhasudha 
   I have a new problem. If the timeline server is deployed separately in the 
kerberized hdfs environment, and the service is called after the token refresh 
time of Kerberos, the authorization failure exception will appear.
   ```
   WARN security.UserGroupInformation: Exception encountered while running the 
renewal command for [email protected]. (TGT end time:1609920920000, 
renewalFailures: 
org.apache.hadoop.metrics2.lib.MutableGaugeInt@7964ce9e,renewalFailuresTotal: 
org.apache.hadoop.metrics2.lib.MutableGaugeLong@7d5b456a)
   ExitCodeException exitCode=1: kinit: KDC can't fulfill requested option 
while renewing credentials
   ```
   
   I think this is a bug. If the timeline server is in a kerberized hdfs 
environment, it should refresh the credentials regularly. Otherwise, when the 
service is not called for a long time, the authorization will be invalid and 
the service will not be available.
   If you have time, can you confirm this is a problem please. If it is a bug, 
I can propose an issue on JIRA and try to fix it.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to