[GitHub] [hudi] cdmikechen commented on issue #2100: [SUPPORT] 0.6.0 - using keytab authentication gives issues

[GitBox <gi...@apache.org>]

cdmikechen commented on issue #2100:
URL: https://github.com/apache/hudi/issues/2100#issuecomment-755797895


   @bhasudha 
   I have a new problem. If the timeline server is deployed separately in the kerberized hdfs environment, and the service is called after the token refresh time of Kerberos, the authorization failure exception will appear.
   ```
   WARN security.UserGroupInformation: Exception encountered while running the renewal command for hdfs@XXXX.COM. (TGT end time:1609920920000, renewalFailures: org.apache.hadoop.metrics2.lib.MutableGaugeInt@7964ce9e,renewalFailuresTotal: org.apache.hadoop.metrics2.lib.MutableGaugeLong@7d5b456a)
   ExitCodeException exitCode=1: kinit: KDC can't fulfill requested option while renewing credentials
   ```
   
   I think this is a bug. If the timeline server is in a kerberized hdfs environment, it should refresh the credentials regularly. Otherwise, when the service is not called for a long time, the authorization will be invalid and the service will not be available.
   If you have time, can you confirm this is a problem please. If it is a bug, I can propose an issue on JIRA and try to fix it.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org