question What is correct strategy for hbase Kerberos Login For Long running applications? in Archives of Support Questions (Read Only) https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101277#M13986 <P>We run hbase client in long running application in kerberized cluster. </P><P>We login to hadoop and hbase using UserGroupInformation class.</P><P>Also, we launch as background thread to relogin.</P><P>However , this code does not work with versions of hbase-client ( 0.98-4-hadoop2 and hadoop-common 2.6.0).</P><P>Is there a better way to perform kerberos login usinf keytab and taking care of ticket expiry.</P> Tue, 05 Jan 2016 01:50:54 GMT ajajoo 2016-01-05T01:50:54Z What is correct strategy for hbase Kerberos Login For Long running applications? https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101277#M13986 <P>We run hbase client in long running application in kerberized cluster. </P><P>We login to hadoop and hbase using UserGroupInformation class.</P><P>Also, we launch as background thread to relogin.</P><P>However , this code does not work with versions of hbase-client ( 0.98-4-hadoop2 and hadoop-common 2.6.0).</P><P>Is there a better way to perform kerberos login usinf keytab and taking care of ticket expiry.</P> Tue, 05 Jan 2016 01:50:54 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101277#M13986 ajajoo 2016-01-05T01:50:54Z Re: What is correct strategy for hbase Kerberos Login For Long running applications? https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101278#M13987 <P><A rel="user" href="https://community.cloudera.com/users/561/ajajoo.html" nodeid="561">@Arvind K Jajoo</A> This code looks reasonable. Can you please elaborate what does not work with 0.98.4?</P> Tue, 05 Jan 2016 03:14:39 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101278#M13987 elserj 2016-01-05T03:14:39Z Re: What is correct strategy for hbase Kerberos Login For Long running applications? https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101279#M13988 <P>After every 30 minutes when thread enters into checkTGTAndReloginFromKeytab method it must relogin after 8 hours since our kerberos expiry is 10 hours but it does not relogin. </P> Tue, 05 Jan 2016 04:08:33 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101279#M13988 ajajoo 2016-01-05T04:08:33Z Re: What is correct strategy for hbase Kerberos Login For Long running applications? https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101280#M13989 <P>What version of Java are you using? I ask as some changes in Java 1.7 stopped ticket renewal in Hadoop 2.6.0/HDP2.2.0; it's been fixed in later Hadoop releases (2.6.2?) and later versions of HDP2.2+</P> Tue, 05 Jan 2016 20:16:50 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101280#M13989 stevel 2016-01-05T20:16:50Z Re: What is correct strategy for hbase Kerberos Login For Long running applications? https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101281#M13990 <P>Ohh, we are using Java 1.7 and Hadoop 2.6 release .</P> Fri, 08 Jan 2016 04:44:06 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101281#M13990 ajajoo 2016-01-08T04:44:06Z Re: What is correct strategy for hbase Kerberos Login For Long running applications? https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101282#M13991 <P>Arvind, you may be using a combination of Hadoop &amp; JDK that doesn't support keytab renewal. The later versions of Hadoop 2.6 (that's apache 2.6.2+ and HDP 2.2 maintenance releases) should work.</P> Sat, 09 Jan 2016 00:18:39 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101282#M13991 stevel 2016-01-09T00:18:39Z Re: What is correct strategy for hbase Kerberos Login For Long running applications? https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101283#M13992 <P>BTW, if you try that login &amp; renew at startup, you should be able to fail fast and not wait so long to find out things aren't working.</P> Sat, 09 Jan 2016 00:19:46 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/What-is-correct-strategy-for-hbase-Kerberos-Login-For-Long/m-p/101283#M13992 stevel 2016-01-09T00:19:46Z