[GitHub] [metron] mmiklavc commented on a change in pull request #1382: METRON-2074: Script to handle TGT renewal with Storm and Kerberos enabled

[GitBox <gi...@apache.org>]

mmiklavc commented on a change in pull request #1382: METRON-2074: Script to handle TGT renewal with Storm and Kerberos enabled
URL: https://github.com/apache/metron/pull/1382#discussion_r276277190
 
 

 ##########
 File path: metron-deployment/Kerberos-manual-setup.md
 ##########
 @@ -636,3 +637,43 @@ The random access indexer topology fails with the following exception.  This exc
 #### Solution
 
 This can occur when an HDFS Client is not installed on the Storm worker nodes.  This might occur on any Storm worker node where an HDFS Client is not installed.  Installing the HDFS Client on all Storm worker nodes should resolve the problem.
+
+## TGT Ticket Renew
+
+Apache Storm doesn't handle automatic TGT ticket renewal for their running topologies. Instead, it is left up to the operations team deploying the Storm topologies
+in a Kerberized environment to manage this themselves. We've included a Python script that can be setup with a cron process to automatically manage the renewal
+process for you. The script should be run on an interval that is shorter than the renew_lifetime configured for your TGT.
+
+### Setup Instructions
+
+Run the following on a node with a Storm and Metron client installed. We need python 2.7 via virtualenv for this to work correctly.
+
+```
+su - metron
 
 Review comment:
   I've updated the docs based on your feedback. How's it look now?

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services