GitHub user zjffdu opened a pull request:

    [ZEPPELIN-3356] Kerberos ticket still expire after 7 days

    ### What is this PR for?
    The root cause is that we may do UserGroupInformation.loginUserFromKeytab 
multiple times if we use hdfs for several places, e.g. for notebook repo and 
zeppelin config. This PR fix the bug by only doing 
UserGroupInformation.loginUserFromKeytab one time.
    ### What type of PR is it?
    [Bug Fix ]
    ### Todos
    * [ ] - Task
    ### What is the Jira issue?
    ### How should this be tested?
    Manually tested
    * Add the following properties to /etc/krb5.conf
       renew_lifetime = 10m
      ticket_lifetime = 5m
    * Add the following properties to /var/kerberos/krb5kdc/kdc.conf
      max_renewable_life = 10m
      max_life = 5m
    Without this PR, will hit the ticket expire after 10 minutes. With this PR, 
the ticket is still valid after 10 minutes 
    ### Screenshots (if appropriate)
    ### Questions:
    * Does the licenses files need update? No
    * Is there breaking changes for older versions? No
    * Does this needs documentation? No

You can merge this pull request into a Git repository by running:

    $ git pull ZEPPELIN-3356

Alternatively you can review and apply these changes as the patch at:

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #2924



Reply via email to