ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-8336) Add Security State to Ambari database
Date Fri, 21 Nov 2014 21:50:33 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-8336?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas updated AMBARI-8336:
---------------------------------
    Description: 
In order to track which services and components have been or need to be secured, several tables
need to be updated with a {{security_state}} column to contain one the following values:

 /**
   * Indicates that it is not known whether the service or component is secured or not
   */
  UNKNOWN,
  /**
   * Indicates service or component is not or should not be secured
   */
  UNSECURED,
  /**
   * Indicates component is or should be secured using Kerberos
   */
  SECURED_KERBEROS,
  /**
   * Indicates the component is in the process of being secured
   */
  SECURING,
  /**
   * Indicates the component is in the process of being unsecured
   */
  UNSECURING,
  /**
   * Indicates the component is not secured due to an error condition
   */
  ERROR;

* {{UNKNOWN}} - Indicates the state is unknown
* {{OFF}} - Indicates the service or component is not or should not be Kerberized
* {{ON}} - Indicates the service or component is or should be Kerberized
* {{IN_PROGRESS}} - Indicates the component is in the process of being Kerberized 
* {{ERROR}} - Indicates the component cannot or failed to be Kerberized

The following tables need to be updated:

* hostcomponentdesiredstate - To indicate whether the component needs Kerberos added or removed
({{OFF}}, {{ON}})
* hostcomponentstate - To indicate whether the component is currently configured for Kerberos
or not ({{OFF}}, {{IN_PROGRESS}}, {{ON}}, {{ERROR}}, {{UNKNOWN}})
* servicedesiredstate - To indicate whether the service (and it components) should or should
not be Kerberized ({{OFF}}, {{ON}})

  was:
In order to track which services and components have been or need to be _Kerberized_ several
tables need to be updated with a {{kerberos_state}} column to contain one the following values:

* {{UNKNOWN}} - Indicates the state is unknown
* {{OFF}} - Indicates the service or component is not or should not be Kerberized
* {{ON}} - Indicates the service or component is or should be Kerberized
* {{IN_PROGRESS}} - Indicates the component is in the process of being Kerberized 
* {{ERROR}} - Indicates the component cannot or failed to be Kerberized

The following tables need to be updated:

* hostcomponentdesiredstate - To indicate whether the component needs Kerberos added or removed
({{OFF}}, {{ON}})
* hostcomponentstate - To indicate whether the component is currently configured for Kerberos
or not ({{OFF}}, {{IN_PROGRESS}}, {{ON}}, {{ERROR}}, {{UNKNOWN}})
* servicedesiredstate - To indicate whether the service (and it components) should or should
not be Kerberized ({{OFF}}, {{ON}})


> Add Security State to Ambari database
> -------------------------------------
>
>                 Key: AMBARI-8336
>                 URL: https://issues.apache.org/jira/browse/AMBARI-8336
>             Project: Ambari
>          Issue Type: New Feature
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>            Priority: Blocker
>              Labels: kerberos
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-8336_01.patch, AMBARI-8336_02.patch
>
>
> In order to track which services and components have been or need to be secured, several
tables need to be updated with a {{security_state}} column to contain one the following values:
>  /**
>    * Indicates that it is not known whether the service or component is secured or not
>    */
>   UNKNOWN,
>   /**
>    * Indicates service or component is not or should not be secured
>    */
>   UNSECURED,
>   /**
>    * Indicates component is or should be secured using Kerberos
>    */
>   SECURED_KERBEROS,
>   /**
>    * Indicates the component is in the process of being secured
>    */
>   SECURING,
>   /**
>    * Indicates the component is in the process of being unsecured
>    */
>   UNSECURING,
>   /**
>    * Indicates the component is not secured due to an error condition
>    */
>   ERROR;
> * {{UNKNOWN}} - Indicates the state is unknown
> * {{OFF}} - Indicates the service or component is not or should not be Kerberized
> * {{ON}} - Indicates the service or component is or should be Kerberized
> * {{IN_PROGRESS}} - Indicates the component is in the process of being Kerberized 
> * {{ERROR}} - Indicates the component cannot or failed to be Kerberized
> The following tables need to be updated:
> * hostcomponentdesiredstate - To indicate whether the component needs Kerberos added
or removed ({{OFF}}, {{ON}})
> * hostcomponentstate - To indicate whether the component is currently configured for
Kerberos or not ({{OFF}}, {{IN_PROGRESS}}, {{ON}}, {{ERROR}}, {{UNKNOWN}})
> * servicedesiredstate - To indicate whether the service (and it components) should or
should not be Kerberized ({{OFF}}, {{ON}})



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message