ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas" <rle...@hortonworks.com>
Subject Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect
Date Thu, 25 Jun 2015 14:11:00 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/
-----------------------------------------------------------

Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.


Bugs: AMBARI-12137
    https://issues.apache.org/jira/browse/AMBARI-12137


Repository: ambari


Description
-------

The storm user principals should be derived using the storm user + cluster name: 
```
storm-${cluster_name}@${realm}
```

The keytab name should be consistent with other headless identities: 
```
storm.headless.keytab
```

#Solution
Update Storm's Kerberos descriptor to fix the relevant identitiy


Diffs
-----

  ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
  ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
  ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
  ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
  ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
  ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 

Diff: https://reviews.apache.org/r/35875/diff/


Testing
-------

Manual testing

Local unit test passed

#Jenkins test results: PENDING


Thanks,

Robert Levas


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message