ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dilli Arumugam (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-8873) ADKerberosOperationHandler should not add domain suffix in SPN
Date Tue, 23 Dec 2014 02:01:13 GMT
Dilli Arumugam created AMBARI-8873:
--------------------------------------

             Summary: ADKerberosOperationHandler should not add domain suffix in SPN
                 Key: AMBARI-8873
                 URL: https://issues.apache.org/jira/browse/AMBARI-8873
             Project: Ambari
          Issue Type: Bug
            Reporter: Dilli Arumugam
            Assignee: Dilli Arumugam


ADKeberosOperationHandler at present adds windows domain name as suffix in service principal
name.

See the code snippet

    Attribute spn = new BasicAttribute("servicePrincipalName");
    spn.add(principal + "@" + realm.toUpperCase());
    attributes.put(spn);

This worked find in Windows Server 2012.
But breaks in Windows Server 2008.
We can not get service ticket for a principal created with service principal name like

nn/ambari@EXAMPLE.COM

We have to set the service principal name without domain name suffix, fro example
 nn/ambari
to work correctly in Windows Server 2008 and Windows Server 2012.





--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message