ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dilli Arumugam (JIRA)" <>
Subject [jira] [Created] (AMBARI-8873) ADKerberosOperationHandler should not add domain suffix in SPN
Date Tue, 23 Dec 2014 02:01:13 GMT
Dilli Arumugam created AMBARI-8873:

             Summary: ADKerberosOperationHandler should not add domain suffix in SPN
                 Key: AMBARI-8873
             Project: Ambari
          Issue Type: Bug
            Reporter: Dilli Arumugam
            Assignee: Dilli Arumugam

ADKeberosOperationHandler at present adds windows domain name as suffix in service principal

See the code snippet

    Attribute spn = new BasicAttribute("servicePrincipalName");
    spn.add(principal + "@" + realm.toUpperCase());

This worked find in Windows Server 2012.
But breaks in Windows Server 2008.
We can not get service ticket for a principal created with service principal name like


We have to set the service principal name without domain name suffix, fro example
to work correctly in Windows Server 2008 and Windows Server 2012.

This message was sent by Atlassian JIRA

View raw message