Support

Handling long-running sessions in RStudio Server Pro with Kerberos

Follow

Many companies use Kerberos with RStudio, using PAM modules to generate the necessary Kerberos ticket on login (see here).

If you are using Kerberos with RStudio Server in this fashion, you may notice issues when a session is running or left suspended for a long period of time where the Kerberos ticket expires while the session is still ongoing. There are a few methods to deal with this, depending on your needs:

  • The simplest is just to have your users log out and then log back in - this should cause a new Kerberos ticket to be generated.
  • Users can run a command like kinit in the console (via system("kinit")) to cause a new Kerberos ticket to be generated in the session
  • Finally, you can write your code for your database to check for a Kerberos ticket, and if the ticket is expired, run a command at that point to generate a new ticket - you could include something like
    system('kinit', input=.rs.askForPassword("Enter your Password:")) to also require a password for added security.

Comments