[
https://issues.apache.org/jira/browse/HBASE-24768?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17223689#comment-17223689
]
Hudson commented on HBASE-24768:
--------------------------------
Results for branch branch-1
[build #48 on
builds.a.o|https://ci-hadoop.apache.org/job/HBase/job/HBase%20Nightly/job/branch-1/48/]:
(x) *{color:red}-1 overall{color}*
----
details (if available):
(/) {color:green}+1 general checks{color}
-- For more information [see general
report|https://ci-hadoop.apache.org/job/HBase/job/HBase%20Nightly/job/branch-1/48//General_Nightly_Build_Report/]
(x) {color:red}-1 jdk7 checks{color}
-- For more information [see jdk7
report|https://ci-hadoop.apache.org/job/HBase/job/HBase%20Nightly/job/branch-1/48//JDK7_Nightly_Build_Report/]
(x) {color:red}-1 jdk8 hadoop2 checks{color}
-- For more information [see jdk8 (hadoop2)
report|https://ci-hadoop.apache.org/job/HBase/job/HBase%20Nightly/job/branch-1/48//JDK8_Nightly_Build_Report_(Hadoop2)/]
(x) {color:red}-1 source release artifact{color}
-- See build output for details.
> Clear cached service kerberos ticket in case of SASL failures thrown from
> server side
> -------------------------------------------------------------------------------------
>
> Key: HBASE-24768
> URL: https://issues.apache.org/jira/browse/HBASE-24768
> Project: HBase
> Issue Type: Bug
> Reporter: Sandeep Guggilam
> Assignee: Sandeep Guggilam
> Priority: Major
>
> We setup a SASL connection using different mechanisms like Digest, Kerberos
> from master to RS for various activities like region assignment etc. In case
> of SASL connect failures, we try to dispose of the SaslRpcClient and try to
> relogin from the keytab on the client side. However the relogin from keytab
> method doesn't clear off the service ticket cached in memory unless TGT is
> about to expire within a timeframe.
> This actually causes an issue where there is a keytab refresh that happens
> because of expiry on the RS server and throws a SASL connect error when
> Master reaches out to the RS server with the cached service ticket that no
> longer works with the new refreshed keytab. We might need to clear off the
> service ticket cached as there could be a credential refresh on the RS server
> side when handling connect failures
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
