ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Dilli Arumugam (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-8912) ADKerberosOperationHandler should strip realmname from principal name before creating principal
Date Thu, 25 Dec 2014 03:07:13 GMT
Dilli Arumugam created AMBARI-8912:
--------------------------------------

             Summary: ADKerberosOperationHandler should strip realmname from principal name
before creating principal
                 Key: AMBARI-8912
                 URL: https://issues.apache.org/jira/browse/AMBARI-8912
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.0.0
            Reporter: Dilli Arumugam
            Assignee: Dilli Arumugam
             Fix For: 2.0.0


If principalName passed to ADKerberosOperationHandler contains realm suffix such as nn/c6401.ambari.apache.org@KNOX.COM,
the suffix realm should be stripped before we create ldap entry in AD.  We already suffix
the realm name in user principal name in ADKerberosOperationHandler. So, if we do not strip
the realmname in incoming principalname we end up with realm name suffixed twice.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message