Return-Path: 
 <dev-return-42501-apmail-ambari-dev-archive=ambari.apache.org@ambari.apache.org>
X-Original-To: apmail-ambari-dev-archive@www.apache.org
Delivered-To: apmail-ambari-dev-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 342BC17627
	for <apmail-ambari-dev-archive@www.apache.org>;
 Wed, 22 Oct 2014 01:05:34 +0000 (UTC)
Received: (qmail 74983 invoked by uid 500); 22 Oct 2014 01:05:34 -0000
Delivered-To: apmail-ambari-dev-archive@ambari.apache.org
Received: (qmail 74895 invoked by uid 500); 22 Oct 2014 01:05:34 -0000
Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:dev-help@ambari.apache.org>
List-Unsubscribe: <mailto:dev-unsubscribe@ambari.apache.org>
List-Post: <mailto:dev@ambari.apache.org>
List-Id: <dev.ambari.apache.org>
Reply-To: dev@ambari.apache.org
Delivered-To: mailing list dev@ambari.apache.org
Received: (qmail 74751 invoked by uid 99); 22 Oct 2014 01:05:33 -0000
Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28)
    by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 22 Oct 2014 01:05:33 +0000
Date: Wed, 22 Oct 2014 01:05:33 +0000 (UTC)
From: "Jaimin D Jetly (JIRA)" <jira@apache.org>
To: dev@ambari.apache.org
Message-ID: <JIRA.12749603.1413922239000.311378.1413939933922@Atlassian.JIRA>
In-Reply-To: <JIRA.12749603.1413922239000@Atlassian.JIRA>
References: <JIRA.12749603.1413922239000@Atlassian.JIRA>
 <JIRA.12749603.1413922239162@arcas>
Subject: [jira] [Updated] (AMBARI-7890) Make changes in ambari-web code to
 support knox kerberization
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394


     [ https://issues.apache.org/jira/browse/AMBARI-7890?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jaimin D Jetly updated AMBARI-7890:
-----------------------------------
    Description: 
*1. Show knox section on Configure Services page with the {{knox_principal_name}} and {{knox_keytab_path}} properties. These properties will be added to knox-env.xml file*

*2. Edit core-site.xml if HDFS service is installed on the cluster*
{code}
<property>
    <name>hadoop.proxyuser.knox.groups</name>
    <value>users</value>
</property>
<property>
    <name>hadoop.proxyuser.knox.hosts</name>
    <value>FQDN_OF_KNOX_HOST</value>
</property>
{code}

*3. Edit webhcat-site.xml if Hive is installed*
{code}
<property>
    <name>webhcat.proxyuser.knox.groups</name>
    <value>users</value>
</property>
<property>
    <name>webhcat.proxyuser.knox.hosts</name>
    <value>FQDN_OF_KNOX_HOST</value>
</property>
{code}

*4. Edit oozie-site.xml if Oozie is installed*
{code}
<property>
   <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name>
   <value>users</value>
</property>
<property>
   <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name>
   <value>FQDN_OF_KNOX_HOST</value>
</property>
{code}

*5. Edit hive-site.xml (Enable http transport mode and use substitution in Hive Server2.)*

hive.server2.allow.user.substitution=true

hive.server2.transport.mode=http 

hive.server2.thrift.http.port=10001

hive.server2.thrift.http.path=cliservice

*6. Edit gateway-site.xml*

gateway.hadoop.kerberos.secured=true


  was:
*1. Show knox section on Configure Services page with the {{knox_principal_name}} and {{knox_keytab_path}} properties. These properties will be added to knox-env.xml file*

*2. Edit core-site.xml if HDFS service is installed on the cluster*
{code}
<property>
    <name>hadoop.proxyuser.knox.groups</name>
    <value>users</value>
</property>
<property>
    <name>hadoop.proxyuser.knox.hosts</name>
    <value>FQDN_OF_KNOX_HOST</value>
</property>
{code}

*3. Edit webhcat-site.xml if Hive is installed*
{code}
<property>
    <name>webhcat.proxyuser.knox.groups</name>
    <value>users</value>
</property>
<property>
    <name>webhcat.proxyuser.knox.hosts</name>
    <value>FQDN_OF_KNOX_HOST</value>
</property>
{code}

*4. Edit oozie-site.xml if Oozie is installed*
{code}
<property>
   <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name>
   <value>users</value>
</property>
<property>
   <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name>
   <value>FQDN_OF_KNOX_HOST</value>
</property>
{code}

*5. Edit hive-site.xml (Enable http transport mode and use substitution in Hive Server2.) *

hive.server2.allow.user.substitution=true

hive.server2.transport.mode=http 

hive.server2.thrift.http.port=10001

hive.server2.thrift.http.path=cliservice

*6. Edit gateway-site.xml*

gateway.hadoop.kerberos.secured=true



> Make changes in ambari-web code to support knox kerberization
> -------------------------------------------------------------
>
>                 Key: AMBARI-7890
>                 URL: https://issues.apache.org/jira/browse/AMBARI-7890
>             Project: Ambari
>          Issue Type: Technical task
>          Components: ambari-web
>    Affects Versions: 1.7.0
>            Reporter: Jaimin D Jetly
>            Assignee: Jaimin D Jetly
>             Fix For: 1.7.0
>
>
> *1. Show knox section on Configure Services page with the {{knox_principal_name}} and {{knox_keytab_path}} properties. These properties will be added to knox-env.xml file*
> *2. Edit core-site.xml if HDFS service is installed on the cluster*
> {code}
> <property>
>     <name>hadoop.proxyuser.knox.groups</name>
>     <value>users</value>
> </property>
> <property>
>     <name>hadoop.proxyuser.knox.hosts</name>
>     <value>FQDN_OF_KNOX_HOST</value>
> </property>
> {code}
> *3. Edit webhcat-site.xml if Hive is installed*
> {code}
> <property>
>     <name>webhcat.proxyuser.knox.groups</name>
>     <value>users</value>
> </property>
> <property>
>     <name>webhcat.proxyuser.knox.hosts</name>
>     <value>FQDN_OF_KNOX_HOST</value>
> </property>
> {code}
> *4. Edit oozie-site.xml if Oozie is installed*
> {code}
> <property>
>    <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name>
>    <value>users</value>
> </property>
> <property>
>    <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name>
>    <value>FQDN_OF_KNOX_HOST</value>
> </property>
> {code}
> *5. Edit hive-site.xml (Enable http transport mode and use substitution in Hive Server2.)*
> hive.server2.allow.user.substitution=true
> hive.server2.transport.mode=http 
> hive.server2.thrift.http.port=10001
> hive.server2.thrift.http.path=cliservice
> *6. Edit gateway-site.xml*
> gateway.hadoop.kerberos.secured=true



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)