Is there a way to refresh JVM with new tgt when a new realm is added to the kdc?

133 Views Asked by At

We have enabled security via Kerberos for all processes on a HBase cluster. When we add a new realm to the kdc we would like for all processes to see the new configuration without having to reboot or wait for the periodic tgt renewal.

1

There are 1 best solutions below

0
On

In Windows we use for this purpose KerbTray (a tool from Window Server 2003 Resource Kit - 2003 but it still works, at least KerbTray). We right-click on its icon in system tray and from menu choose option "Purge tickets".

It's possible to do that in command line too, using Microsoft klist purge (as described here: https://technet.microsoft.com/en-us/library/hh134826.aspx).