Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 7FA21200B35 for ; Sat, 28 May 2016 01:00:17 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 7BF7E160A38; Fri, 27 May 2016 23:00:17 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id E7676160A37 for ; Sat, 28 May 2016 01:00:16 +0200 (CEST) Received: (qmail 60094 invoked by uid 500); 27 May 2016 23:00:16 -0000 Mailing-List: contact issues-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list issues@ambari.apache.org Received: (qmail 60047 invoked by uid 99); 27 May 2016 23:00:16 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 27 May 2016 23:00:16 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id D6C632C1F71 for ; Fri, 27 May 2016 23:00:15 +0000 (UTC) Date: Fri, 27 May 2016 23:00:15 +0000 (UTC) From: "Srimanth Gunturi (JIRA)" To: issues@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (AMBARI-16171) Changes to Phoenix QueryServer Kerberos configuration MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Fri, 27 May 2016 23:00:17 -0000 [ https://issues.apache.org/jira/browse/AMBARI-16171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Srimanth Gunturi updated AMBARI-16171: -------------------------------------- Fix Version/s: 2.4.1 > Changes to Phoenix QueryServer Kerberos configuration > ----------------------------------------------------- > > Key: AMBARI-16171 > URL: https://issues.apache.org/jira/browse/AMBARI-16171 > Project: Ambari > Issue Type: Improvement > Reporter: Josh Elser > Assignee: Josh Elser > Fix For: 2.4.1 > > Attachments: AMBARI-16171-stackadvisor-WIP.patch, AMBARI-16171.001.patch, AMBARI-16171.002.patch, AMBARI-16171.003.patch, AMBARI-16171.006.patch, AMBARI-16171.007.patch, AMBARI-16171.009.patch > > > The up-coming version of Phoenix will contain some new functionality to support Kerberos authentication of clients via SPNEGO with the Phoenix Query Server (PQS). > Presently, Ambari will configure PQS to use the hbase service keytab which will result in the SPNEGO authentication failing as the RFC requires that the "primary" component of the Kerberos principal for the server is "HTTP". Thus, we need to ensure that we switch PQS over to use the spnego.service.keytab as the keytab and "HTTP/_HOST@REALM" as the principal. -- This message was sent by Atlassian JIRA (v6.3.4#6332)