ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-9170) Principal creation for Active Directory accounts should be configurable
Date Mon, 19 Jan 2015 21:14:34 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-9170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14283001#comment-14283001
] 

Hudson commented on AMBARI-9170:
--------------------------------

FAILURE: Integrated in Ambari-trunk-Commit-docker #802 (See [https://builds.apache.org/job/Ambari-trunk-Commit-docker/802/])
AMBARI-9170. Principal creation for Active Directory accounts should be configurable (rlevas)
(rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=01fa8eb03bc1a7de7bb914a8d8bc468cd87c4bd5)
* ambari-server/src/main/java/org/apache/ambari/server/serveraction/AbstractServerAction.java
* ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/ADKerberosOperationHandler.java
* ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/MITKerberosOperationHandler.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelper.java
* ambari-server/src/test/java/org/apache/ambari/server/serveraction/kerberos/MITKerberosOperationHandlerTest.java
* ambari-server/src/test/java/org/apache/ambari/server/serveraction/kerberos/ADKerberosOperationHandlerTest.java
* ambari-server/src/test/java/org/apache/ambari/server/serveraction/ServerActionExecutorTest.java
* ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/configuration/kerberos-env.xml
* ambari-server/src/test/java/org/apache/ambari/server/actionmanager/TestActionScheduler.java
* ambari-server/src/main/java/org/apache/ambari/server/state/ConfigHelper.java
* ambari-server/src/test/java/org/apache/ambari/server/serveraction/kerberos/KerberosOperationHandlerTest.java
* ambari-server/src/main/java/org/apache/ambari/server/actionmanager/Stage.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/internal/UpgradeResourceProvider.java
* ambari-server/src/test/java/org/apache/ambari/server/actionmanager/TestActionDBAccessorImpl.java
* ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/KerberosOperationHandler.java
* ambari-server/src/test/java/org/apache/ambari/server/serveraction/kerberos/KerberosServerActionTest.java
* ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/KerberosServerAction.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java


> Principal creation for Active Directory accounts should be configurable
> -----------------------------------------------------------------------
>
>                 Key: AMBARI-9170
>                 URL: https://issues.apache.org/jira/browse/AMBARI-9170
>             Project: Ambari
>          Issue Type: Improvement
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>              Labels: active_directory, kerberos
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-9170_01.patch, AMBARI-9170_02.patch, AMBARI-9170_03.patch
>
>
> The properties used to create accounts in an Active Directory, related to principal creation,
should be configurable such that a user may specify the required fields and their values (with
variable replacement).
> This may be done using a simple structure like XML or JSON, however a template facility
(like Jinja2) may be more useful since conditional paths may be built in.  The template should
be stored in the {{kerberos-env}} configuration.
> An example of a need for a conditional path in a template is related to _service_ accounts
vs _user_ accounts.  A _service_ account (such as nn/\_HOST@REALM) should have the {{servicePrincipalName}}
field set to the service's principal, where this value shouldn't be set for a _user_ account
(such as hdfs@REALM).



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message