You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@flume.apache.org by Inder Pall <in...@gmail.com> on 2012/05/22 13:33:43 UTC

Query regarding FLUME and secure hadoop

Folks,

Based on my current understanding kerberos tokens have a maximum lifetime.
HDFSEvent Sink does kerberos login as a part of it's init and i believe as
a part of getUserLogin()  theTGT renewal thread also starts.

So what happens when you reach the maximum renewable lifetime of the
ticket. Does that require a relogin() if so how is it handled in FLUME?

-- 
Thanks,
- Inder
  Tech Platforms @Inmobi
  Linkedin - http://goo.gl/eR4Ub

Re: Query regarding FLUME and secure hadoop

Posted by Inder Pall <in...@gmail.com>.

Thanks Mike.

- Inder

On Tue, May 22, 2012 at 9:22 PM, Mike Percy <mp...@cloudera.com> wrote:

> Hi Inder,
> Hadoop handles it automatically. You will see a message indicating
> re-login in the flume.log file. I've tested this by setting ticket_lifetime
> in the krb5.conf file on the Flume host.
>
> Mike
>
>
> On Tuesday, May 22, 2012, Inder Pall wrote:
>
>> Folks,
>>
>> Based on my current understanding kerberos tokens have a maximum lifetime.
>> HDFSEvent Sink does kerberos login as a part of it's init and i believe as
>> a part of getUserLogin()  theTGT renewal thread also starts.
>>
>> So what happens when you reach the maximum renewable lifetime of the
>> ticket. Does that require a relogin() if so how is it handled in FLUME?
>>
>> --
>> Thanks,
>> - Inder
>>  Tech Platforms @Inmobi
>>  Linkedin - http://goo.gl/eR4Ub
>>
>


-- 
Thanks,
- Inder
  Tech Platforms @Inmobi
  Linkedin - http://goo.gl/eR4Ub

Re: Query regarding FLUME and secure hadoop

Posted by Inder Pall <in...@gmail.com>.

Thanks Mike.

- Inder

On Tue, May 22, 2012 at 9:22 PM, Mike Percy <mp...@cloudera.com> wrote:

> Hi Inder,
> Hadoop handles it automatically. You will see a message indicating
> re-login in the flume.log file. I've tested this by setting ticket_lifetime
> in the krb5.conf file on the Flume host.
>
> Mike
>
>
> On Tuesday, May 22, 2012, Inder Pall wrote:
>
>> Folks,
>>
>> Based on my current understanding kerberos tokens have a maximum lifetime.
>> HDFSEvent Sink does kerberos login as a part of it's init and i believe as
>> a part of getUserLogin()  theTGT renewal thread also starts.
>>
>> So what happens when you reach the maximum renewable lifetime of the
>> ticket. Does that require a relogin() if so how is it handled in FLUME?
>>
>> --
>> Thanks,
>> - Inder
>>  Tech Platforms @Inmobi
>>  Linkedin - http://goo.gl/eR4Ub
>>
>


-- 
Thanks,
- Inder
  Tech Platforms @Inmobi
  Linkedin - http://goo.gl/eR4Ub

Re: Query regarding FLUME and secure hadoop

Posted by Mike Percy <mp...@cloudera.com>.

Hi Inder,
Hadoop handles it automatically. You will see a message indicating re-login
in the flume.log file. I've tested this by setting ticket_lifetime in the
krb5.conf file on the Flume host.

Mike

On Tuesday, May 22, 2012, Inder Pall wrote:

> Folks,
>
> Based on my current understanding kerberos tokens have a maximum lifetime.
> HDFSEvent Sink does kerberos login as a part of it's init and i believe as
> a part of getUserLogin()  theTGT renewal thread also starts.
>
> So what happens when you reach the maximum renewable lifetime of the
> ticket. Does that require a relogin() if so how is it handled in FLUME?
>
> --
> Thanks,
> - Inder
>  Tech Platforms @Inmobi
>  Linkedin - http://goo.gl/eR4Ub
>

Re: Query regarding FLUME and secure hadoop

Posted by Mike Percy <mp...@cloudera.com>.

Hi Inder,
Hadoop handles it automatically. You will see a message indicating re-login
in the flume.log file. I've tested this by setting ticket_lifetime in the
krb5.conf file on the Flume host.

Mike

On Tuesday, May 22, 2012, Inder Pall wrote:

> Folks,
>
> Based on my current understanding kerberos tokens have a maximum lifetime.
> HDFSEvent Sink does kerberos login as a part of it's init and i believe as
> a part of getUserLogin()  theTGT renewal thread also starts.
>
> So what happens when you reach the maximum renewable lifetime of the
> ticket. Does that require a relogin() if so how is it handled in FLUME?
>
> --
> Thanks,
> - Inder
>  Tech Platforms @Inmobi
>  Linkedin - http://goo.gl/eR4Ub
>