ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-10848) kerberos automated script adapter for Active Directory
Date Thu, 30 Apr 2015 00:55:05 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-10848?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14520641#comment-14520641
] 

Robert Levas commented on AMBARI-10848:
---------------------------------------

The ability to generate scripts was not added; however Ambari is moving in that direction.
 In Ambari 2.1, a manual option will be available where Ambari will only update configurations
and the user is expected to manage the Kerberos infrastructure - edit the krb5.conf file,
create principals, and distribute keytab files. Top help, there will be the ability to download
a CSV file of the expected principals - like in Ambari 1.7. 

Maybe somewhere in the mix, the ability to have Ambari generate script could be added?


> kerberos automated script adapter for Active Directory
> ------------------------------------------------------
>
>                 Key: AMBARI-10848
>                 URL: https://issues.apache.org/jira/browse/AMBARI-10848
>             Project: Ambari
>          Issue Type: New Feature
>          Components: security
>            Reporter: Laser
>   Original Estimate: 672h
>  Remaining Estimate: 672h
>
> Currently Ambari does not support active directory integration with kerberos authentication
. this issue will be addressed in JIRA "AMBARI-10709" .
> What we suggest is contributing an adapter to invoke the output of the  IBM kerberos
automation toolkit for hadoop (https://developer.ibm.com/hadoop/blog/2014/12/11/ibms-kerberos-automation-toolkit-hadoop/)
which will be contributed in JIRA "AMBARI-10709" and therefore some of the clients will have
the option to run the framework automatically .



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message