You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@kudu.apache.org by "Todd Lipcon (JIRA)" <ji...@apache.org> on 2017/01/21 00:55:26 UTC

[jira] [Created] (KUDU-1845) Kerberos client keytab should be periodically renewed

Todd Lipcon created KUDU-1845:
---------------------------------

             Summary: Kerberos client keytab should be periodically renewed
                 Key: KUDU-1845
                 URL: https://issues.apache.org/jira/browse/KUDU-1845
             Project: Kudu
          Issue Type: Improvement
          Components: security
            Reporter: Todd Lipcon
            Priority: Critical


Currently, security/init.cc initializes the Kerberos client keytab on startup, but never renews it. The credentials expire after some time so it's important to have some thread which renews it before expiration (hopefully in such a way that if a renewal transiently fails, we don't lose our previously good ticket)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)