[PR] [core] Preserve external UGI when paimon has no kerberos credentials [paimon]

["kerwin-zk (via GitHub)" <gi...@apache.org>]

kerwin-zk opened a new pull request, #7862:
URL: https://github.com/apache/paimon/pull/7862

   ### Purpose
     When no explicit Kerberos credentials (`security.kerberos.login.keytab` / `security.kerberos.login.principal`) are provided in catalog options, `HadoopModule.install()` calls
     `UserGroupInformation.setConfiguration()` and **resets the JVM-global UGI auth method**.
   
     This can wipe out a Kerberos TGT already established by the host process — e.g. by Spark via `spark.kerberos.principal` / `spark.kerberos.keytab` — and cause downstream SASL / HMS calls
     to fail with:
   
     > `GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)`
   
    Therefore, preserve the externally-established UGI when paimon has no credentials to install.
   
   ### Tests
   CI


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@paimon.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] [core] Preserve external UGI when paimon has no kerberos credentials [paimon]

["JingsongLi (via GitHub)" <gi...@apache.org>]

JingsongLi merged PR #7862:
URL: https://github.com/apache/paimon/pull/7862


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@paimon.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org