ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (AMBARI-8912) ADKerberosOperationHandler should strip realmname from principal name before creating principal
Date Wed, 18 Mar 2015 01:37:38 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-8912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas resolved AMBARI-8912.
----------------------------------
    Resolution: Fixed

This issue was resolved with the resolution of AMBARI-9170


> ADKerberosOperationHandler should strip realmname from principal name before creating
principal
> -----------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-8912
>                 URL: https://issues.apache.org/jira/browse/AMBARI-8912
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Dilli Arumugam
>            Assignee: Dilli Arumugam
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-8912.1.patch
>
>
> If principalName passed to ADKerberosOperationHandler contains realm suffix such as nn/c6401.ambari.apache.org@KNOX.COM,
the suffix realm should be stripped before we create ldap entry in AD.  We already suffix
the realm name in user principal name in ADKerberosOperationHandler. So, if we do not strip
the realmname in incoming principalname we end up with realm name suffixed twice.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message