ambari-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From adorosz...@apache.org
Subject [2/2] ambari git commit: AMBARI-21146. Knox JAAS configuration file should not allow the Kerberos ticket cache to be used when establishing its identity on startup (Attila Magyar via adoroszlai)
Date Thu, 08 Jun 2017 09:25:50 GMT
AMBARI-21146. Knox JAAS configuration file should not allow the Kerberos ticket cache to be
used when establishing its identity on startup (Attila Magyar via adoroszlai)


Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/24dcb1c8
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/24dcb1c8
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/24dcb1c8

Branch: refs/heads/branch-2.5
Commit: 24dcb1c851ede76bda0759a980a6c5106a208141
Parents: 87e993e
Author: Attila Magyar <amagyar@hortonworks.com>
Authored: Thu Jun 8 11:24:56 2017 +0200
Committer: Attila Doroszlai <adoroszlai@hortonworks.com>
Committed: Thu Jun 8 11:24:56 2017 +0200

----------------------------------------------------------------------
 .../KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2  | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/ambari/blob/24dcb1c8/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
index fa3237b..29b2179 100644
--- a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
+++ b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
@@ -17,14 +17,11 @@
 #}
 com.sun.security.jgss.initiate {
 com.sun.security.auth.module.Krb5LoginModule required
-renewTGT=true
+renewTGT=false
 doNotPrompt=true
 useKeyTab=true
 keyTab="{{knox_keytab_path}}"
 principal="{{knox_principal_name}}"
-isInitiator=true
 storeKey=true
-useTicketCache=true
-client=true;
-};
-
+useTicketCache=false;
+};
\ No newline at end of file


Mime
View raw message