sunxiaojian commented on code in PR #7734:
URL: https://github.com/apache/seatunnel/pull/7734#discussion_r1776284186


##########
seatunnel-connectors-v2/connector-iceberg/src/main/java/org/apache/seatunnel/connectors/seatunnel/iceberg/IcebergCatalogLoader.java:
##########
@@ -170,11 +169,10 @@ public static void doKerberosAuthentication(
                         "Start Kerberos authentication using principal {} and 
keytab {}",
                         principal,
                         keytabPath);
-                sun.security.krb5.Config.refresh();

Review Comment:
   > > > If your application is running and you modify the krb5.conf file at 
the same time. LoginUserFromKeytabAndReturnUGI will not reload the changes. It 
will only read and load the current Kerberos configuration when the application 
starts.
   > > > I think the correct way to modify it is to find out why this error is 
reported instead of directly removing it
   > > 
   > > 
   > > @dailai 
[apache/incubator-uniffle#625](https://github.com/apache/incubator-uniffle/issues/625)
 , It would be best to explain the necessity of the existence of this code
   > 
   > It's wight. You can refer this way 
[apache/incubator-uniffle#932](https://github.com/apache/incubator-uniffle/pull/932)
   
   @dailai  Why not call Config.refresh() JDK>8?   So isn't this necessary?   
   
   Have 2 ways to solve the issue.
   
   - Remove sun.security.krb5.Config.refresh(); code.
   - Add --add-exports java.security.jgss/sun.security.krb5=ALL-UNNAMED in the 
pom.xml of the project.
   
   Firstly, explain the necessity of calling refresh clearly



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to