Github user gss2002 commented on the issue: https://github.com/apache/zeppelin/pull/2886 @zjffdu I am going to cut the new improved fix based on original feedback. But yes you will have to adjust the KDC to test this as Java does not use ticket_lifetime or renew_lifetime from krb5.conf per this article not fixed until Java 9. https://stackoverflow.com/questions/38555244/how-do-you-set-the-kerberos-ticket-lifetime-from-java https://bugs.openjdk.java.net/browse/JDK-8044500
---