ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Laser (JIRA)" <>
Subject [jira] [Commented] (AMBARI-10709) Kerberos automation via generated scripts
Date Thu, 30 Apr 2015 00:08:05 GMT


Laser commented on AMBARI-10709:

Hi Robert .
Thank you for your interest in this JIRA.

I was looking at the JIRA suggested by you - AMBARI-9783, it seems that both JIRA's are complementing
one another .
I believe that this is the case since AMBARI-9783 is requesting an option to enable kerberos
manually, and this JIRA (AMBARI-10709) will actually create the scripts based on the users
topology in order to be run manually (after reviewing the content is correct).

So basically they are "best of friends" . 

> Kerberos automation via generated scripts
> -----------------------------------------
>                 Key: AMBARI-10709
>                 URL:
>             Project: Ambari
>          Issue Type: New Feature
>          Components: security
>            Reporter: Laser
> Currently Amabari project does not provide a way for very security conscious clients
to get editable scripts to be run on their system .
> In a real world scenario with enterprise level customers, there will be no way that these
customers will let the Ambari wizard run anything on the organization LDAP server .
> What we suggest to contribute  is a framework which is based on "IBM''s kerberos automation
toolkit for hadoop ",  more details can be found here :
> This toolkit supports building scripts and other resources for both "openLDAP" and "Active
Directory" in order to ease up the configuration of kerberos on hadoop enviornments for security
concious clients . these scripts and artifacts are created based on the clients topology .
and have been tested at various client sites. 

This message was sent by Atlassian JIRA

View raw message