ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-12137) Kerberos: storm headless princ + keytab seem incorrect
Date Thu, 25 Jun 2015 20:27:05 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-12137?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14601876#comment-14601876
] 

Hudson commented on AMBARI-12137:
---------------------------------

FAILURE: Integrated in Ambari-branch-2.1 #116 (See [https://builds.apache.org/job/Ambari-branch-2.1/116/])
AMBARI-12137. Kerberos: storm headless princ + keytab seem incorrect (rlevas) (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=47f2ef739a3b5976cbadddadf4b8d466ab45e767)
* ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json
* ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json
* ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json
* ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json
* ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig
* ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json


> Kerberos: storm headless princ + keytab seem incorrect
> ------------------------------------------------------
>
>                 Key: AMBARI-12137
>                 URL: https://issues.apache.org/jira/browse/AMBARI-12137
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.1.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>            Priority: Critical
>              Labels: kerberos, kerberos_descriptor
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-12137_01.patch
>
>
> * The storm user principals should be derived using the storm user + cluster name: 
> {noformat}
> storm-${cluster_name}@${realm}
> {noformat}
> * The keytab name should be consistent with other headless identities: 
> {noformat}
> storm.headless.keytab
> {noformat}
> *Solution*
> Update Storm's Kerberos descriptor to fix the relevant identitiy 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message