Return-Path: X-Original-To: apmail-ambari-dev-archive@www.apache.org Delivered-To: apmail-ambari-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id A84E7195B6 for ; Mon, 29 Feb 2016 13:58:18 +0000 (UTC) Received: (qmail 13654 invoked by uid 500); 29 Feb 2016 13:58:18 -0000 Delivered-To: apmail-ambari-dev-archive@ambari.apache.org Received: (qmail 13616 invoked by uid 500); 29 Feb 2016 13:58:18 -0000 Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list dev@ambari.apache.org Received: (qmail 13585 invoked by uid 99); 29 Feb 2016 13:58:18 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 29 Feb 2016 13:58:18 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 35DC92C1F55 for ; Mon, 29 Feb 2016 13:58:18 +0000 (UTC) Date: Mon, 29 Feb 2016 13:58:18 +0000 (UTC) From: "Bolke de Bruin (JIRA)" To: dev@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (AMBARI-6432) FreeIPA Support in Ambari MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/AMBARI-6432?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Bolke de Bruin updated AMBARI-6432: ----------------------------------- Attachment: (was: AMBARI-6432.trunk.v1.patch) > FreeIPA Support in Ambari > ------------------------- > > Key: AMBARI-6432 > URL: https://issues.apache.org/jira/browse/AMBARI-6432 > Project: Ambari > Issue Type: Improvement > Components: ambari-server > Affects Versions: trunk > Reporter: jay vyas > Attachments: AMBARI-6432-FreeIPA.patch, AMBARI-6432.trunk.v1.patch, ipa-patch-v0.5.patch > > > FreeIPA Is a powerful tool for unifying identity, kerberos credentials, across a cluster. > A great value add for ambari would be to provide support for using FreeIPA to kerberize services. This would allow for > 1) better HCFS interoperability, because first class GID/UID is critical for certain file systems (GlusterFS, Lustre, and any other file system which uses kernel / FUSE apis for determining identity) > 2) better enterprise interoperability. Because of the fact that FreeIPA makes it easy to interop with different identity solutions (like active directory), it would make ambari easier to adopt for various enterprises. > 3) broadens ambaris scope. Now ambari could also allow people to setup the users of their clusters, and at least some of the security features of their clusters, all from one interface (no more manual handling of TGTs and such - it could all be done quite easily via the ambari UI which could make calls to underlying FreeIPA clients). -- This message was sent by Atlassian JIRA (v6.3.4#6332)