Sailesh Mukil has posted comments on this change.
Change subject: [security] avoid kerberos ticket renewal and only reacquire
......................................................................
Patch Set 1:
> I think there is mention of 'renew' in init.h. Also I think we can
> remove the renew_lifetime handling in mini_kdc.{h,cc} as well as
> security-faults-itest.cc.
I removed the mention of renew in init.* and other relevant places. However, I
think it will be beneficial to leave in the renew_lifetime in the mini_kdc just
to ensure that it works under different configurations, if and when we choose
to add more tests that use the minikdc in the future.
For eg: Add more tests to configure kerberos differently to attempt to catch
issues like KUDU-2032.
What do you think?
--
To view, visit http://gerrit.cloudera.org:8080/7810
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-MessageType: comment
Gerrit-Change-Id: I8e5225de332ba785e3a73014b8418cfd4059fe07
Gerrit-PatchSet: 1
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-Owner: Sailesh Mukil <[email protected]>
Gerrit-Reviewer: Kudu Jenkins
Gerrit-Reviewer: Sailesh Mukil <[email protected]>
Gerrit-Reviewer: Todd Lipcon <[email protected]>
Gerrit-HasComments: No
