zhangwl9
zhangwl9
没有，你解决了吗
@gaborgsomogyi Could you please take a look at this when you're free, thanks
> @zhangwl9 have you tested it in a real multiple kerberized HMS env? From my first glance, I don't think it works.你在一个真实的多个 Kerberos 化 HMS 环境中测试过吗？从我的初步观察来看，我不认为它有效。 @pan3793 I kinit a...
> > I think using kinit is not the way forward since that's ephemeral and long running jobs are not able to summon such credentials. I would suggest keytab since...
> erase the HMS token fetched by Spark's built-in HiveDelegationTokenProvider @pan3793 > > > I think using kinit is not the way forward since that's ephemeral and long running jobs...
@gaborgsomogyi As per your reveiew suggestion, I have modified the code regarding #obtainDelegationTokens not returning the next refresh time, which I found to be reasonable based on the explanation there....
@gaborgsomogyi Could you help me in your spare time to take another look at the code for any other issues that I haven't found yet, thanks!
@pan3793 Thank you very much for the reminder that I still need to use the metastoreUri as a service for token
> @zhangwl9 keep the original commit history, and stop squashing unless you are requested, otherwise reviewers have no idea what your change is after each round of reviewing. Also, providing...
@pan3793 Yes, I need to additionally register the parameter "hive.metastore.token.signature=metaStoreUri" along with it to HMS when iceberg creates the hiveCatalog