How to Renew Hive Delegation Token Period

[#1]

Hi guys,

I am setting up my secure cluster with Kerberos.

I run hiveserver2 and metastore on the same machine.

When config hiveserver2-site.xml, I am not sure about what are delegation token configurations about?

<property> <name>hive.cluster.delegation.key.update-interval</name> <value>1000</value> </property> <property> <name>hive.cluster.delegation.token.renew-interval</name> <value>1000</value> </property> <property> <name>hive.cluster.delegation.token.max-lifetime</name> <value>3000</value> </property>

Could you guys explain me these settings? And What should I do if my program token is expired?

How can I renew it?

Thank you.

[#2]

If the delegation token is expired, the server has a background thread to remove expired Delegation Tokens from the server’s token store.

Only the renewer of the Delegation Token can renew it, before it expires.

You may refer the below blog for understanding delegation tokes and its associated parameters:

Hadoop delegation tokens explained