Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@prabhjyotsingh I just read that same stackoverflow part of me says use
checktgtandreloginfronkeytab to be lighter on kdc thoughts? I will dig a bit
deeper in am but auto renewal thread that exists in ugi cannot go beyond max
renewal
@felixcheung I think you are right if I do
usergroupinformation.getCurrentUser().checkTGtAndReloginFromKeytab() would work
too
private void reloginFromKeytab(boolean checkTGT) throws IOException {
if (!shouldRelogin() || !isFromKeytab()) {
return;
}
HadoopLoginContext login = getLogin();
if (login == null) {
throw new KerberosAuthException(MUST_FIRST_LOGIN_FROM_KEYTAB);
}
if (checkTGT) {
KerberosTicket tgt = getTGT();
if (tgt != null && !shouldRenewImmediatelyForTests &&
Time.now() < getRefreshTime(tgt)) {
return;
}
}
relogin(login);
}
---
