Hi Zhang… The answer to your question depends on who performed the kinit and for what purpose.
The services should all renew their Kerberos tickets automatically. The logic for ticket handling in each service is in the source code for that particular service. You will need to research each service to get more information. Tickets obtained by the Ambari agent are typically done on demand for service or alert checks are renewed upon use (but tend to be cached for a small amount of time to avoid excessive load on the KDC). For alerts, most use resource_management.libraries.functions.curl_krb_request.curl_krb_request found in …/ambari/ambari-common/src/main/python/resource_management/libraries/functions/curl_krb_request.py. For service checks, take a look in the various service_check.py files in the stack definitions to see what they do. I hope this helps, Rob From: Zhang Ruiqiang <[email protected]> Reply-To: "[email protected]" <[email protected]> Date: Thursday, August 25, 2016 at 8:23 AM To: "[email protected]" <[email protected]> Subject: Does ambari agent renew kerberos ticket automaticly? Hi all: When kerberos is enabled, the authed user and service get the ticket use a "kinit" command, the ticket will expired after about 6 days. So, my question is: does ambari agent will renew the ticket automaticly, if so, where is the source code to implement this. Thanks.
