Hello folks,

Anybody seen this behaviour or has some information ?

-kaushik

From: Srinivas, Kaushik (Nokia - IN/Bangalore)
Sent: Tuesday, July 16, 2019 3:42 PM
To: users@kafka.apache.org
Subject: kafka with kerberos - works even after renewal lifetime expires

Hi kafka users,

We are seeing the below behavior in our kafka labs, where in
Kerberos ticket lifetime : 5 mins
Kerberos ticket renewal time : 10 mins.

The kafka broker Is brought up and continues to work fine.
The default wait factor across refreshes of the ticket has been retained (0.8).

So we expected the renewal to happen at 4:40 minute and 9:30 minute and at 
14:30 minute we expected the kafka brokers to stop working
Saying the ticket lifetime has expired.
Delegation token feature is not enabled in our labs.

But we see, the kafka broker never stops working and keeps renewing the ticket 
at 0.8 factor of time between renewals.
Has anyone seen this issue ? and is it a bug in kafka renewal strategy ?

Any inputs would help us lot before digging the code for more understanding.

Thanks in advance,
Kaushik
NOKIA.

Reply via email to