ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dilli Arumugam (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-8873) ADKerberosOperationHandler should not add domain suffix in SPN
Date Tue, 23 Dec 2014 02:02:13 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-8873?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Dilli Arumugam updated AMBARI-8873:
-----------------------------------
          Component/s: ambari-server
    Affects Version/s: 2.0.0
        Fix Version/s: 2.0.0

> ADKerberosOperationHandler should not add domain suffix in SPN
> --------------------------------------------------------------
>
>                 Key: AMBARI-8873
>                 URL: https://issues.apache.org/jira/browse/AMBARI-8873
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Dilli Arumugam
>            Assignee: Dilli Arumugam
>             Fix For: 2.0.0
>
>
> ADKeberosOperationHandler at present adds windows domain name as suffix in service principal
name.
> See the code snippet
>     Attribute spn = new BasicAttribute("servicePrincipalName");
>     spn.add(principal + "@" + realm.toUpperCase());
>     attributes.put(spn);
> This worked find in Windows Server 2012.
> But breaks in Windows Server 2008.
> We can not get service ticket for a principal created with service principal name like
> nn/ambari@EXAMPLE.COM
> We have to set the service principal name without domain name suffix, fro example
>  nn/ambari
> to work correctly in Windows Server 2008 and Windows Server 2012.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message