Uploaded image for project: 'Livy (READ-ONLY)'
  1. Livy (READ-ONLY)
  2. LIVY-296

Livy proxy user + kerberos cannot support long running applications

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 0.3
    • Fix Version/s: None
    • Component/s: Server
    • Labels:
      None

      Description

      Because of the limitation of Spark, currently if Livy is running with proxy user + kerberos environment, it will fail to get new tokens after TTL, which means session will be failed after 7 days by default.

      This is mainly due to the problem that proxy user and principal/keytab cannot be coexisted, and without principal/keytab, Spark lacks the ability to re-issue tokens. So inside Spark it should have a new way to issue tokens rather than binding to principal/key on hand. Also in Livy side we should figure out a way to pass new tokens to Spark.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              jerryshao Saisai Shao
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: