[
https://issues.apache.org/jira/browse/ZOOKEEPER-1181?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13133974#comment-13133974
]
Hudson commented on ZOOKEEPER-1181:
-----------------------------------
Integrated in ZooKeeper-trunk #1342 (See
[https://builds.apache.org/job/ZooKeeper-trunk/1342/])
ZOOKEEPER-1181. Fix problems with Kerberos TGT renewal. (Eugene Koontz via
mahadev)
mahadev :
http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1188033
Files :
* /zookeeper/trunk/CHANGES.txt
* /zookeeper/trunk/src/java/main/org/apache/zookeeper/Login.java
> Fix problems with Kerberos TGT renewal
> --------------------------------------
>
> Key: ZOOKEEPER-1181
> URL: https://issues.apache.org/jira/browse/ZOOKEEPER-1181
> Project: ZooKeeper
> Issue Type: Bug
> Components: java client, server
> Affects Versions: 3.4.0
> Reporter: Eugene Koontz
> Assignee: Eugene Koontz
> Labels: kerberos, security
> Fix For: 3.4.0, 3.5.0
>
> Attachments: ZOOKEEPER-1181.patch, ZOOKEEPER-1181.patch,
> ZOOKEEPER-1181.patch
>
>
> Currently, in Zookeeper trunk, there are two problems with Kerberos TGT
> renewal:
> 1. TGTs obtained from a keytab are not refreshed periodically. They should
> be, just as those from ticket cache are refreshed.
> 2. Ticket renewal should be retried if it fails. Ticket renewal might fail if
> two or more separate processes (different JVMs) running as the same user try
> to renew Kerberos credentials at the same time.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
