Temporary Ticket Expiration

Ticket Expiration and JWT Expiration

As described in Checking and Changing the Temporary Ticket Duration, the default duration for the temporary ticket is 20 minutes. You can increase the duration. However, it is important to understand that the JWT has an expiry time too. The SSO provider controls the JWT expiration. Data Fabric software recognizes both expiry settings and expires the temporary ticket when the lesser expiry setting is reached.

For example, if the temporary ticket expiration is set to 2880 minutes (2 days), and the JWT expiration is set to one day, the temporary ticket will expire in one day.

When a Ticket Expires

If a temporary ticket expires while you are using maprcli, hadoop, or the Minio Client (mc), and you have exported the location of the JWT, maprcli or mc will create a new ticket automatically. If you have not exported the location of the JWT, as described in Using CLI Commands Without a User Ticket When SSO Is Configured and Using MinIO Client (mc) Without a User Ticket When SSO Is Configured, the command prompt will indicate that the ticket is not valid.