ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sandor Magyari (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-17257) Ambari Server setup of proxyuser should set default values
Date Thu, 16 Jun 2016 14:24:05 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-17257?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Sandor Magyari updated AMBARI-17257:
------------------------------------
    Description: 
The resolution of RMP-4514 sets '*' for proxyuser.hosts settings. Stack advisor should be
modified to be more restrictive, instead of '*' set ambari server host name in the following
properties:

{code}
hadoop.proxyuser.${ambari_proxy_user}.hosts="{{ hostname of ambari server }}"
webhcat.proxyuser.${ambari_proxy_user}.hosts="{{ hostname of ambari server }}"
yarn.timeline-service.http-authentication.proxyuser.${ambari_proxy_user}.hosts="{{ hostname
of ambari server }}"
{code}

Also this setting below is not required, so it will be removed:
{code}
"yarn.timeline-service.http-authentication.proxyuser.ambari-server.users": "*",
{code}

  was:
The resolution of RMP-4514 uses '*' for setting proxyuser:

{code}
"hadoop.proxyuser.${ambari-server.user}.hosts": "*",
"hadoop.proxyuser.${ambari-server.user}.groups": "*"
"webhcat.proxyuser.${ambari-server.user}.hosts": "*",
"webhcat.proxyuser.${ambari-server.user}.groups": "*"
"yarn.timeline-service.http-authentication.proxyuser.${ambari-server.user}.users": "*",
"yarn.timeline-service.http-authentication.proxyuser.${ambari-server.user}.groups": "*",
"yarn.timeline-service.http-authentication.proxyuser.${ambari-server.user}.hosts": "*"
{code}

Instead it should be:
{code}
"hadoop.proxyuser.${ambari-server.user}.hosts": "{{ hostname of ambari server }}",
"hadoop.proxyuser.${ambari-server.user}.groups": "users"
... same for the other settings above
{code}

And this isn't needed:
{code}
"yarn.timeline-service.http-authentication.proxyuser.ambari-server.users": "*",
{code}


> Ambari Server setup of proxyuser should set default values
> ----------------------------------------------------------
>
>                 Key: AMBARI-17257
>                 URL: https://issues.apache.org/jira/browse/AMBARI-17257
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: ambari-2.4.0
>            Reporter: Sandor Magyari
>            Assignee: Sandor Magyari
>            Priority: Critical
>             Fix For: ambari-2.4.0
>
>
> The resolution of RMP-4514 sets '*' for proxyuser.hosts settings. Stack advisor should
be modified to be more restrictive, instead of '*' set ambari server host name in the following
properties:
> {code}
> hadoop.proxyuser.${ambari_proxy_user}.hosts="{{ hostname of ambari server }}"
> webhcat.proxyuser.${ambari_proxy_user}.hosts="{{ hostname of ambari server }}"
> yarn.timeline-service.http-authentication.proxyuser.${ambari_proxy_user}.hosts="{{ hostname
of ambari server }}"
> {code}
> Also this setting below is not required, so it will be removed:
> {code}
> "yarn.timeline-service.http-authentication.proxyuser.ambari-server.users": "*",
> {code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message