Updated on 2024-11-29 GMT+08:00

What Should I Do When the ZooKeeper Client Fails to Refresh a TGT?

Question

The ZooKeeper client fails to refresh a TGT and therefore ZooKeeper cannot be accessed. The error message is as follows:

Login: Could not renew TGT due to problem running shell command: '***/kinit -R'; exception was:org.apache.zookeeper.Shell$ExitCodeException: kinit: Ticket expired while renewing credentials

Answer

ZooKeeper uses the system command kinit – R to refresh a ticket. In the current version of MRS, the function of this command is canceled. If a long-term task needs to be executed, you are advised to implement the authentication function in keytab mode.

In the Client installation path/ZooKeeper/zookeeper/conf/jaas.conf file, set useTicketCache to false, set useKeyTab to true, and specify the keytab path.