Uploaded image for project: 'Hue'
  1. Hue
  2. HUE-2445

kt_renewer should explicitly ask for renewable tickets

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.0.0
    • Fix Version/s: 3.8.0
    • Component/s: core.api
    • Labels:
      None

      Description

      In krb5 1.2, there's a change to issue a renewable ticket only if the renewable life is greater than the normal ticket life time.

      If that's not the case, kt_renewer will fail with:

      Couldn't renew kerberos ticket in order to work around Kerberos 1.8.1 issue. Please check that the ticket for 'hue/bcub-1.ent.cloudera.com' is still renewable:
        $ kinit -f -c /tmp/hue_krb5_ccache
      If the 'renew until' date is the same as the 'valid starting' date, the ticket cannot be renewed. Please check your KDC configuration, and the ticket renewal policy (maxrenewlife) for the 'hue/bcub-1.ent.cloudera.com' and `krbtgt' principals.
      

      So it's better for kt_renewer to always specify `-r' to kinit.

        Attachments

          Activity

            People

            • Assignee:
              bcwalrus bc Wong
              Reporter:
              bcwalrus bc Wong
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: