Is there a way to get Ticket expiration time from JAVA program using Hadoop APIs'?

[#1 · Accepted solution]

For that you will need to get access to javax.security.auth.kerberos.KerberosTicket, the class in Hadoop UesrGroupInformation provides API to manage that, however the closest method to deal with expirations is checkTGTAndReloginFromKeytab which is likely not what you want.

[#2]

Looking at the source; it's almost possible to do it, but the checks are hidden in some private/protected code. It's something that could be made public -why not file a JIRA on the Apache server?