ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jaimin D Jetly (JIRA)" <j...@apache.org>
Subject [jira] [Reopened] (AMBARI-17330) Ambari changes to support kerberized Ranger tagsync
Date Mon, 18 Jul 2016 16:28:20 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-17330?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Jaimin D Jetly reopened AMBARI-17330:
-------------------------------------

Reopening the issue as the patch is causing issues with Atlas deployment in kerberized environment.

> Ambari changes to support kerberized Ranger tagsync
> ---------------------------------------------------
>
>                 Key: AMBARI-17330
>                 URL: https://issues.apache.org/jira/browse/AMBARI-17330
>             Project: Ambari
>          Issue Type: Improvement
>          Components: ambari-server
>    Affects Versions: 2.4.0
>            Reporter: Mugdha Varadkar
>            Assignee: Mugdha Varadkar
>            Priority: Critical
>             Fix For: 2.4.0
>
>         Attachments: AMBARI-17330.1.patch, AMBARI-17330.patch
>
>
> Remove below properties from ranger-tagsync-site.xml:
> - ranger.tagsync.atlas.to.ranger.service.mapping
> - ranger.tagsync.atlas.custom.resource.mappers
> Add below property in ranger-tagsync-site.xml:
> - ranger.tagsync.source.atlasrest.username (default - empty)
> Add below properties in tagsync-application-properties.xml only if cluster is kerberized:
> - atlas.jaas.KafkaClient.loginModuleName=com.sun.security.auth.module.Krb5LoginModule
> - atlas.jaas.KafkaClient.loginModuleControlFlag=required
> atlas.jaas.KafkaClient.option.useKeyTab=true
> - atlas.jaas.KafkaClient.option.storeKey=true
> - atlas.jaas.KafkaClient.option.serviceName=kafka
> - atlas.jaas.KafkaClient.option.keyTab=tagsync_keytab_path
> - atlas.jaas.KafkaClient.option.principal=tagsync_jaas_principal
> - atlas.kafka.sasl.kerberos.service.name=kafka
> - atlas.kafka.security.protocol=SASL_PLAINTEXT



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message