Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id BF54B200B0F for ; Fri, 3 Jun 2016 07:45:00 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id BE003160A52; Fri, 3 Jun 2016 05:45:00 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 37348160A51 for ; Fri, 3 Jun 2016 07:45:00 +0200 (CEST) Received: (qmail 58847 invoked by uid 500); 3 Jun 2016 05:44:59 -0000 Mailing-List: contact issues-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list issues@ambari.apache.org Received: (qmail 58828 invoked by uid 99); 3 Jun 2016 05:44:59 -0000 Received: from arcas.apache.org (HELO arcas) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 03 Jun 2016 05:44:59 +0000 Received: from arcas.apache.org (localhost [127.0.0.1]) by arcas (Postfix) with ESMTP id 2C2F52C044E for ; Fri, 3 Jun 2016 05:44:59 +0000 (UTC) Date: Fri, 3 Jun 2016 05:44:59 +0000 (UTC) From: "Mahadev konar (JIRA)" To: issues@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Updated] (AMBARI-16171) Changes to Phoenix QueryServer Kerberos configuration MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 archived-at: Fri, 03 Jun 2016 05:45:00 -0000 [ https://issues.apache.org/jira/browse/AMBARI-16171?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mahadev konar updated AMBARI-16171: ----------------------------------- Fix Version/s: (was: 2.4.1) 2.4.0 > Changes to Phoenix QueryServer Kerberos configuration > ----------------------------------------------------- > > Key: AMBARI-16171 > URL: https://issues.apache.org/jira/browse/AMBARI-16171 > Project: Ambari > Issue Type: Improvement > Reporter: Josh Elser > Assignee: Josh Elser > Fix For: 2.4.0 > > Attachments: AMBARI-16171-stackadvisor-WIP.patch, AMBARI-16171.001.patch, AMBARI-16171.002.patch, AMBARI-16171.003.patch, AMBARI-16171.006.patch, AMBARI-16171.007.patch, AMBARI-16171.009.patch, AMBARI-16171.addendum.patch, AMBARI-16171.addendum2-1.patch, AMBARI-16171.addendum2.patch > > > The up-coming version of Phoenix will contain some new functionality to support Kerberos authentication of clients via SPNEGO with the Phoenix Query Server (PQS). > Presently, Ambari will configure PQS to use the hbase service keytab which will result in the SPNEGO authentication failing as the RFC requires that the "primary" component of the Kerberos principal for the server is "HTTP". Thus, we need to ensure that we switch PQS over to use the spnego.service.keytab as the keytab and "HTTP/_HOST@REALM" as the principal. -- This message was sent by Atlassian JIRA (v6.3.4#6332)