diff --git a/CHANGES.txt b/CHANGES.txt index 67b4ccbc123..1450c116f27 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -590,6 +590,9 @@ Release 0.22.0 - Unreleased HADOOP-6898. FileSystem.copyToLocal creates files with 777 permissions. (Aaron T. Myers via tomwhite) + HADOOP-7229. Do not default to an absolute path for kinit in Kerberos + auto-renewal thread. (Aaron T. Myers via todd) + Release 0.21.1 - Unreleased IMPROVEMENTS diff --git a/src/java/core-default.xml b/src/java/core-default.xml index 85e5966a225..57b878365c5 100644 --- a/src/java/core-default.xml +++ b/src/java/core-default.xml @@ -123,6 +123,16 @@ + + hadoop.kerberos.kinit.command + kinit + Used to periodically renew Kerberos credentials when provided + to Hadoop. The default setting assumes that kinit is in the PATH of users + running the Hadoop client. Change this to the absolute path to kinit if this + is not the case. + + + diff --git a/src/java/org/apache/hadoop/security/UserGroupInformation.java b/src/java/org/apache/hadoop/security/UserGroupInformation.java index 085ce61719e..af133af7b3c 100644 --- a/src/java/org/apache/hadoop/security/UserGroupInformation.java +++ b/src/java/org/apache/hadoop/security/UserGroupInformation.java @@ -560,7 +560,7 @@ public class UserGroupInformation { public void run() { String cmd = conf.get("hadoop.kerberos.kinit.command", - "/usr/kerberos/bin/kinit"); + "kinit"); KerberosTicket tgt = getTGT(); if (tgt == null) { return;