search

teragrep / cfe_39

HDFS Data Ingestion for PTH_06 use
GNU Affero General Public License v3.0
0 stars 3 forks source link

Long running process fails to refresh kerberos ticket #32

Open StrongestNumber9 opened 2 months ago

StrongestNumber9 commented 2 months ago

Describe the bug

Caused by: java.io.IOException: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
<snip>
Caused by: javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)]
<snip>
Caused by: GSSException: No valid credentials provided (Mechanism level: Failed to find any Kerberos tgt)
<snip>

because of

10:00:47.483 [xxxxx1] INFO  org.apache.hadoop.security.UserGroupInformation - Login successful for user xxxx/xxxxxx@XXXXX using keytab file hdfsdi.keytab. Keytab auto renewal enabled : false
                                                                                                                                                                                         ^^^^^

Expected behavior

Renews tickets automatically

How to reproduce

Start kerberized cfe_39 and leave it on for >24hr

Software version

0.2.0 beta

Tiihott commented 1 month ago

Automatic TGT renewal is disabled by default it seems. Enabling it should fix the issue, and an alternative way to fix the issue is to call checkTGTAndReloginFromKeytab() periodically.