Return-Path: X-Original-To: apmail-ambari-dev-archive@www.apache.org Delivered-To: apmail-ambari-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 9BCE010F96 for ; Wed, 18 Mar 2015 01:37:38 +0000 (UTC) Received: (qmail 12550 invoked by uid 500); 18 Mar 2015 01:37:38 -0000 Delivered-To: apmail-ambari-dev-archive@ambari.apache.org Received: (qmail 12497 invoked by uid 500); 18 Mar 2015 01:37:38 -0000 Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list dev@ambari.apache.org Received: (qmail 12402 invoked by uid 99); 18 Mar 2015 01:37:38 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 18 Mar 2015 01:37:38 +0000 Date: Wed, 18 Mar 2015 01:37:38 +0000 (UTC) From: "Robert Levas (JIRA)" To: dev@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Resolved] (AMBARI-8912) ADKerberosOperationHandler should strip realmname from principal name before creating principal MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/AMBARI-8912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Levas resolved AMBARI-8912. ---------------------------------- Resolution: Fixed This issue was resolved with the resolution of AMBARI-9170 > ADKerberosOperationHandler should strip realmname from principal name before creating principal > ----------------------------------------------------------------------------------------------- > > Key: AMBARI-8912 > URL: https://issues.apache.org/jira/browse/AMBARI-8912 > Project: Ambari > Issue Type: Bug > Components: ambari-server > Affects Versions: 2.0.0 > Reporter: Dilli Arumugam > Assignee: Dilli Arumugam > Fix For: 2.0.0 > > Attachments: AMBARI-8912.1.patch > > > If principalName passed to ADKerberosOperationHandler contains realm suffix such as nn/c6401.ambari.apache.org@KNOX.COM, the suffix realm should be stripped before we create ldap entry in AD. We already suffix the realm name in user principal name in ADKerberosOperationHandler. So, if we do not strip the realmname in incoming principalname we end up with realm name suffixed twice. -- This message was sent by Atlassian JIRA (v6.3.4#6332)