dailai commented on code in PR #7734:
URL: https://github.com/apache/seatunnel/pull/7734#discussion_r1776330072
##########
seatunnel-connectors-v2/connector-iceberg/src/main/java/org/apache/seatunnel/connectors/seatunnel/iceberg/IcebergCatalogLoader.java:
##########
@@ -170,11 +169,10 @@ public static void doKerberosAuthentication(
"Start Kerberos authentication using principal {} and
keytab {}",
principal,
keytabPath);
- sun.security.krb5.Config.refresh();
Review Comment:
I mean that. @hailin0 It's right.
org.apache.seatunnel.connectors.seatunnel.iceberg.IcebergCatalogLoader#doKerberosAuthentication
org.apache.hadoop.security.UserGroupInformation#loginUserFromKeytab
org.apache.hadoop.security.UserGroupInformation#loginUserFromKeytabAndReturnUGI
org.apache.hadoop.security.UserGroupInformation#doSubjectLogin
org.apache.hadoop.security.UserGroupInformation#newLoginContext
org.apache.hadoop.security.UserGroupInformation#newLoginContext
javax.security.auth.login.LoginContext#init
org.apache.hadoop.security.UserGroupInformation.HadoopConfiguration#getAppConfigurationEntry
org.apache.hadoop.security.UserGroupInformation.HadoopConfiguration#getKerberosEntry
which made refreshKrb5Config is true
Finally,
org.apache.hadoop.security.UserGroupInformation.HadoopLoginContext#login
call the method named com.sun.security.auth.module.Krb5LoginModule#login
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
