Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 536A1200B40 for ; Thu, 2 Jun 2016 07:23:01 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 488FA160A4F; Thu, 2 Jun 2016 05:23:01 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id BFFC7160A4E for ; Thu, 2 Jun 2016 07:23:00 +0200 (CEST) Received: (qmail 87999 invoked by uid 500); 2 Jun 2016 05:22:59 -0000 Mailing-List: contact issues-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list issues@ambari.apache.org Received: (qmail 87970 invoked by uid 99); 2 Jun 2016 05:22:59 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 Jun 2016 05:22:59 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 6D40C2C044E for ; Thu, 2 Jun 2016 05:22:59 +0000 (UTC) Date: Thu, 2 Jun 2016 05:22:59 +0000 (UTC) From: "Josh Elser (JIRA)" To: issues@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Reopened] (AMBARI-16171) Changes to Phoenix QueryServer Kerberos configuration MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Thu, 02 Jun 2016 05:23:01 -0000 [ https://issues.apache.org/jira/browse/AMBARI-16171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Josh Elser reopened AMBARI-16171: --------------------------------- We're still seeing issues with this, even after the addendum. > Changes to Phoenix QueryServer Kerberos configuration > ----------------------------------------------------- > > Key: AMBARI-16171 > URL: https://issues.apache.org/jira/browse/AMBARI-16171 > Project: Ambari > Issue Type: Improvement > Reporter: Josh Elser > Assignee: Josh Elser > Fix For: 2.4.1 > > Attachments: AMBARI-16171-stackadvisor-WIP.patch, AMBARI-16171.001.patch, AMBARI-16171.002.patch, AMBARI-16171.003.patch, AMBARI-16171.006.patch, AMBARI-16171.007.patch, AMBARI-16171.009.patch, AMBARI-16171.addendum.patch > > > The up-coming version of Phoenix will contain some new functionality to support Kerberos authentication of clients via SPNEGO with the Phoenix Query Server (PQS). > Presently, Ambari will configure PQS to use the hbase service keytab which will result in the SPNEGO authentication failing as the RFC requires that the "primary" component of the Kerberos principal for the server is "HTTP". Thus, we need to ensure that we switch PQS over to use the spnego.service.keytab as the keytab and "HTTP/_HOST@REALM" as the principal. -- This message was sent by Atlassian JIRA (v6.3.4#6332)