ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (AMBARI-8873) ADKerberosOperationHandler should not add domain suffix in SPN
Date Tue, 17 Mar 2015 19:53:38 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-8873?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas resolved AMBARI-8873.
----------------------------------
    Resolution: Duplicate

This issue was resolved with the resolution of AMBARI-9170

> ADKerberosOperationHandler should not add domain suffix in SPN
> --------------------------------------------------------------
>
>                 Key: AMBARI-8873
>                 URL: https://issues.apache.org/jira/browse/AMBARI-8873
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Dilli Arumugam
>            Assignee: Dilli Arumugam
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-8874.1.patch
>
>
> ADKeberosOperationHandler at present adds windows domain name as suffix in service principal
name.
> See the code snippet
>     Attribute spn = new BasicAttribute("servicePrincipalName");
>     spn.add(principal + "@" + realm.toUpperCase());
>     attributes.put(spn);
> This worked find in Windows Server 2012.
> But breaks in Windows Server 2008.
> We can not get service ticket for a principal created with service principal name like
> nn/ambari@EXAMPLE.COM
> We have to set the service principal name without domain name suffix, fro example
>  nn/ambari
> to work correctly in Windows Server 2008 and Windows Server 2012.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message