ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-10235) Remove unneeded identities from kerberos descriptor
Date Sat, 28 Mar 2015 09:30:52 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-10235?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14385208#comment-14385208
] 

Robert Levas commented on AMBARI-10235:
---------------------------------------

+1 on the patch.

The code that was removed wasn't doing anything anyways.  If you needed to set different configurations
per component, you wold keep the service-level identities in place and then reference them
from the relevant components using something like:

{code}
{
  "name" : "../accumulo_service",
  "principal" : {
    "configuration" : "accumulo-site/component.specific.pricipal.property"
  },
  "keytab" : {
    "configuration" : "accumulo-site/component.specific.keytab.property"
  }
}
{code}


> Remove unneeded identities from kerberos descriptor
> ---------------------------------------------------
>
>                 Key: AMBARI-10235
>                 URL: https://issues.apache.org/jira/browse/AMBARI-10235
>             Project: Ambari
>          Issue Type: Technical task
>          Components: stacks
>            Reporter: Billie Rinaldi
>            Assignee: Billie Rinaldi
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-10235.1.patch
>
>
> [~rlevas] pointed out that the components' identities in Accumulo's kerberos descriptors
are not using the correct syntax.  This is not preventing kerberos installation because these
identities are not being used, and can be removed.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message