ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-16171) Changes to Phoenix QueryServer Kerberos configuration
Date Fri, 20 May 2016 23:13:13 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-16171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15294501#comment-15294501
] 

Hudson commented on AMBARI-16171:
---------------------------------

FAILURE: Integrated in Ambari-trunk-Commit #4888 (See [https://builds.apache.org/job/Ambari-trunk-Commit/4888/])
AMBARI-16171. Changes to Phoenix QueryServer Kerberos configuration (rlevas: [http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=9f0af38f2b01f74770e31affe78ccba49e712351])
* ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java
* ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java
* ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json
* ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java


> Changes to Phoenix QueryServer Kerberos configuration
> -----------------------------------------------------
>
>                 Key: AMBARI-16171
>                 URL: https://issues.apache.org/jira/browse/AMBARI-16171
>             Project: Ambari
>          Issue Type: Improvement
>            Reporter: Josh Elser
>            Assignee: Josh Elser
>         Attachments: AMBARI-16171.001.patch, AMBARI-16171.002.patch, AMBARI-16171.003.patch,
AMBARI-16171.006.patch, AMBARI-16171.007.patch
>
>
> The up-coming version of Phoenix will contain some new functionality to support Kerberos
authentication of clients via SPNEGO with the Phoenix Query Server (PQS).
> Presently, Ambari will configure PQS to use the hbase service keytab which will result
in the SPNEGO authentication failing as the RFC requires that the "primary" component of the
Kerberos principal for the server is "HTTP". Thus, we need to ensure that we switch PQS over
to use the spnego.service.keytab as the keytab and "HTTP/_HOST@REALM" as the principal.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message