[
https://issues.apache.org/jira/browse/HADOOP-13807?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15654094#comment-15654094
]
Alejandro Abdelnur commented on HADOOP-13807:
---------------------------------------------
The following method in the UGI should add to the following IF condition {{&&
!externalKeyTab}}:
{code}
private void spawnAutoRenewalThreadForUserCreds() {
if (isSecurityEnabled()) {
//spawn thread only if we have kerb credentials
if (user.getAuthenticationMethod() == AuthenticationMethod.KERBEROS &&
!isKeytab) {
Thread t = new Thread(new Runnable() {
......
{code}
> UGI renewal thread should be spawn only if the keytaab is not external
> ----------------------------------------------------------------------
>
> Key: HADOOP-13807
> URL: https://issues.apache.org/jira/browse/HADOOP-13807
> Project: Hadoop Common
> Issue Type: Bug
> Components: security
> Affects Versions: 2.7.2, 2.6.4, 3.0.0-alpha1
> Reporter: Alejandro Abdelnur
> Priority: Minor
>
> The renewal thread should not be spawned if the keytab is external.
> Because of HADOOP-13805 the can be a case that an UGI does not have a keytab
> because authentication is managed by the host program. In such case we should
> not spawn the renewal thread.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
