ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-12137) Kerberos: storm headless princ + keytab seem incorrect
Date Wed, 24 Jun 2015 22:02:04 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-12137?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas updated AMBARI-12137:
----------------------------------
    Description: 
* The storm user principals should be derived using the storm user + cluster name: 
{noformat}
storm-${cluster_name}@${realm}
{noformat}

* The keytab name should be consistent with other headless identities: 
{noformat}
storm.headless.keytab
{noformat}

*Solution*
Update Storm's Kerberos descriptor to fix the relevant identitiy 

  was:
# The storm user principals should be derived using the storm user + cluster name: 
{noformat}
storm-${cluster_name}@${realm}
{noformat}

# The keytab name should be consistent with other headless identities: 
{noformat}
storm.headless.keytab
{noformat}

*Solution*
Update Storm's Kerberos descriptor to fix the relevant identitiy 


> Kerberos: storm headless princ + keytab seem incorrect
> ------------------------------------------------------
>
>                 Key: AMBARI-12137
>                 URL: https://issues.apache.org/jira/browse/AMBARI-12137
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.1.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>            Priority: Critical
>              Labels: kerberos, kerberos_descriptor
>             Fix For: 2.1.0
>
>
> * The storm user principals should be derived using the storm user + cluster name: 
> {noformat}
> storm-${cluster_name}@${realm}
> {noformat}
> * The keytab name should be consistent with other headless identities: 
> {noformat}
> storm.headless.keytab
> {noformat}
> *Solution*
> Update Storm's Kerberos descriptor to fix the relevant identitiy 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message