[
https://issues.apache.org/jira/browse/FLINK-26043?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17605326#comment-17605326
]
Gabor Somogyi commented on FLINK-26043:
---------------------------------------
The kerberos token manager does the renewal in case of keytab. Pleease see
[here|https://github.com/apache/flink/blob/master/flink-runtime/src/main/java/org/apache/flink/runtime/security/token/KerberosDelegationTokenManager.java#L252-L283].
In case of token cache there is no re-login, such case [renewTGT is set to
true|https://github.com/apache/flink/blob/master/flink-runtime/src/main/java/org/apache/flink/runtime/security/KerberosUtils.java#L96]
and that's all. JAAS system TGT renewal is outside of Flink territory so may
or may not happen.
> Add periodic kerberos relogin to DelegationTokenManager
> -------------------------------------------------------
>
> Key: FLINK-26043
> URL: https://issues.apache.org/jira/browse/FLINK-26043
> Project: Flink
> Issue Type: Sub-task
> Reporter: Gabor Somogyi
> Assignee: Gabor Somogyi
> Priority: Major
> Labels: pull-request-available
> Fix For: 1.16.0
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
