[
https://issues.apache.org/jira/browse/IMPALA-14029?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17949502#comment-17949502
]
Laszlo Gaal commented on IMPALA-14029:
--------------------------------------
Turns out that docker/install_os_services.sh failed to include the {{krb5}}
package when building a Wolfi-based container. Only the Kerberos runtime
libraries were installed by pulling in {{krb5-libs}}, but the Kerberos
utilities in {{krb5}} are missing. The solution is to extend the install list
with the {{krb5}} package.
> Coordinator frontend fails to find kinit when running in hardened container
> image
> ---------------------------------------------------------------------------------
>
> Key: IMPALA-14029
> URL: https://issues.apache.org/jira/browse/IMPALA-14029
> Project: IMPALA
> Issue Type: Bug
> Components: Infrastructure
> Affects Versions: Impala 5.0.0
> Reporter: Laszlo Gaal
> Assignee: Laszlo Gaal
> Priority: Major
>
> When running in a containerized environment secured with Kerberos, the Impala
> coordinator failed to renew its TGT after the initial expiration, because the
> Hadoop libraries linked to the frontend's Java code failed to locate and
> launch the Kerberos {{kinit}} utility.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
