https://community.cloudera.com/t5/Support-Questions/How-to-reissue-a-delegated-token-after-max-lifetime-passes/m-p/240826#M202630 <P>Spark-submit looks fine, this issue will take more than a forum to resolve, would require code and logs analysis I'd say.</P><P>Meanwhile, I can only suggest to pass "-Dsun.security.krb5.debug=true" to the extraJavaOptions, and it would also help if you can set the following in log4j.properties file "log4j.logger.org.apache.spark.deploy.yarn.Client=DEBUG", then restart the application, hoping it will print more pointers. Also, if your KDC is an MIT KDC, double check that your principal has not set a 'Maximum Renewal Time' of 00:00:00 as explained <A href="http://championofcyrodiil.blogspot.com/2014/01/kinit-ticket-expired-while-renewing.html"> here</A> </P><P>Another property to try out, depending on your application use case that may help is to set:</P><P>--conf mapreduce.job.complete.cancel.delegation.tokens=false</P> Wed, 09 Jan 2019 03:48:24 GMT dbompart 2019-01-09T03:48:24Z