ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "John Speidel" <jspei...@hortonworks.com>
Subject Re: Review Request 30849: Preserve kerberos auth_to_local rules when scaling kerberized cluster
Date Wed, 11 Feb 2015 02:17:09 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/30849/
-----------------------------------------------------------

(Updated Feb. 11, 2015, 2:17 a.m.)


Review request for Ambari and Robert Levas.


Changes
-------

Changes to resolve reviewer issues and concerns.
Also, handle case where existing rule contains a wildcard realm '.*'
Removed default auth_to_local rules, except for "DEFAULT" from stack.


Bugs: AMBARI-9022
    https://issues.apache.org/jira/browse/AMBARI-9022


Repository: ambari


Description
-------

When scaling a kerberized cluster need to ensure that existing auth_to_local rules are preserved.
Also, need to properly order all rules in the property from most to least specific.


Diffs (updated)
-----

  ambari-server/src/main/java/org/apache/ambari/server/controller/AuthToLocalBuilder.java
6017bed 
  ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelper.java ce319e6

  ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/configuration/core-site.xml
1146ffd 
  ambari-server/src/test/java/org/apache/ambari/server/controller/AuthToLocalBuilderTest.java
fbb8ba1 

Diff: https://reviews.apache.org/r/30849/diff/


Testing
-------

Functional tests:
added Oozie to existing cluster

Unit Tests:
-New unit tests
-All tests pass


Thanks,

John Speidel


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message