You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@kyuubi.apache.org by GitBox <gi...@apache.org> on 2021/10/25 11:01:04 UTC

[GitHub] [incubator-kyuubi] zhouyifan279 commented on pull request #1289: Use general UserGroupInformation api for kerberos ticket refresh

zhouyifan279 commented on pull request #1289:
URL: https://github.com/apache/incubator-kyuubi/pull/1289#issuecomment-950800063


   Currently `kinit -kt` mainly because it will create a kerberos ticket cache file (default path: /tmp/krb5cc_$UID).  This file is used both by Kyuubi server and `spark-submit.sh` to authenticate with other services(hadoop hive zookeeper).
   In contrast, `UserGroupInformation#reloginFromKeyTab` can not do that. As a result, `spark-submit.sh` will fail due to  no valid ticket cache is available.
   
   If we want to remove the requirement of `kinit`, we should also provide some kind of credentials for `spark-submit.sh`.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@kyuubi.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org