You are viewing a plain text version of this content. The canonical link for it is here.

Posted to common-issues@hadoop.apache.org by "Devaraj Das (JIRA)" <ji...@apache.org> on 2012/06/06 22:17:23 UTC

[jira] [Updated] (HADOOP-6947) Kerberos relogin should set refreshKrb5Config to true

     [ https://issues.apache.org/jira/browse/HADOOP-6947?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Devaraj Das updated HADOOP-6947:
--------------------------------

    Affects Version/s: 1.0.0
        Fix Version/s: 1.1.0

I am going to commit this to branch-1.
                
> Kerberos relogin should set refreshKrb5Config to true
> -----------------------------------------------------
>
>                 Key: HADOOP-6947
>                 URL: https://issues.apache.org/jira/browse/HADOOP-6947
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 1.0.0, 0.22.0
>            Reporter: Todd Lipcon
>            Assignee: Todd Lipcon
>             Fix For: 1.1.0, 0.22.0
>
>         Attachments: hadoop-6947-branch20.txt, hadoop-6947.txt
>
>
> In working on securing a daemon that uses two different principals from different threads, I found that I wasn't able to login from a second keytab after I'd logged in from the first. This is because we don't set the refreshKrb5Config in the Configuration for the Krb5LoginModule - hence it won't switch over to the correct keytab file if it's different than the first.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira