Depends what you are trying todo.   I was after a test system to see what happened at expiry time of the kerberos ticket.   I could never get the values set by the web interface to work.   In the end I logged into the cloudera node, used kadmin.local and set the max lifetimes for a kerberos ticket for the appropiate principal. ... View more

That isn’t what I mentioned. I’m waiting for the delegation Token to expire to attempt a re-with with Kerberos. ... View more

I have checked the files and the values that I have changed are there but I do not observe any change in behaviour. It seems a valid way to test myself. I’m trying to test what happens if the password for the kerberos principal for the client is changed and the key tab is invalid. Currently I need to wait for 24 hours ( the default time of the renewal of the delegation token ) to see the expiry of the token and attempt to re-aith with a now invalid key tab. Is there another way to test ? Thanks ... View more

I’ve already read that article and it doesn’t tell you how to set the interval & max-lifetime and verify that those values are being used. ... View more

Using the Cloudera Quick StartVM, version 5.13.0-0 I set the interval 60000 and the mx lifetime to 300000 Tried to deploy, restart the whole system etc with no luck. I see the values in the config on disk. I’m trying to test what happens if our client kerberos keytab becomes invalid, i.e. someone changes the password. I have tried changing the values but it appears to use the same values i.e. 1 day for interval as during testing that is when it attempted to use the old client keytab to re-auth. Thanks ... View more