Github user zjffdu commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@gss2002 I just found the root cause is that
UserGroupInformation.loginUserFromKeytab called multiple times and created PR
#2924 to fix it, I have verified it, could you help verified it if you
Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@prabhjyotsingh @zjffdu I made changes to check if security is enabled and
if it was logged in via a keytab and than i relogin with checktgt method vs
relogining in every time causing excess load
Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@zjffdu I am going to cut the new improved fix based on original feedback.
But yes you will have to adjust the KDC to test this as Java does not use
ticket_lifetime or renew_lifetime from
Github user zjffdu commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@gss2002 Do you mean I have to change /var/kerberos/krb5kdc/kdc.conf to
reproduce this issue ?
---
Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
https://stackoverflow.com/questions/38555244/how-do-you-set-the-kerberos-ticket-lifetime-from-java
https://bugs.openjdk.java.net/browse/JDK-8044500
---
Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@zjffdu you cannot just update the krb5.conf those are just recommendations
on the client side. The KDC both with MIT Krb5 and Active Directory control the
max_renewable_lifetime via
Github user zjffdu commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@gss2002 I could not reproduce the issue. I change the krb5.conf as
following:
```
renew_lifetime = 7min
ticket_lifetime = 3min
```
And after one day, zeppelin still
Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@prabhjyotsingh I just read that same stackoverflow part of me says use
checktgtandreloginfronkeytab to be lighter on kdc thoughts? I will dig a bit
deeper in am but auto renewal thread that
Github user zjffdu commented on the issue:
https://github.com/apache/zeppelin/pull/2886
Thanks @gss2002 will review it soon
---
Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@prabhjyotsingh @zjffdu can you help review if you feel this is a valid
fix?
Thanks again
---
Github user gss2002 commented on the issue:
https://github.com/apache/zeppelin/pull/2886
@zjffdu here is a patch that I think will fix this issue. I will know in 7
days if the issue comes back but has plagued our 4 different environments
running Zeppelin over the last few days since
11 matches
Mail list logo
