ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Miklos Gergely (JIRA)" <>
Subject [jira] [Updated] (AMBARI-18898) Multiple kerberos name rules can not be set up for Ambari Infra Solr
Date Tue, 15 Nov 2016 22:14:59 GMT


Miklos Gergely updated AMBARI-18898:
    Attachment: AMBARI-18898.patch

> Multiple kerberos name rules can not be set up for Ambari Infra Solr
> --------------------------------------------------------------------
>                 Key: AMBARI-18898
>                 URL:
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-logsearch
>    Affects Versions: 2.4.0
>            Reporter: Miklos Gergely
>            Assignee: Miklos Gergely
>            Priority: Critical
>             Fix For: 2.5.0
>         Attachments: AMBARI-18898.patch
> If multiple rules are entered into the proprety
> Advanced infra-solr-env / Infra Solr Kerberos name rules
> There are multiple issues here:
> 1. The rules should be escaped, the $ characters in them should be handled, so that the
expressions in the rules like $0, $1 are not replaced with the script directory, and the script
file name. Currently the user must do this in the value entered, which is not even documented.
> 2. The variable SOLR_KERB_NAME_RULES in should have quotes around it's
value, so that the whole string is assigned to it, not only the first rule.
> 3. SOLR_KERB_NAME_RULES can not be the part of SOLR_AUTHENTICATION_OPTS, because it is
handled incorrectly, if an expression like -Dname="value1 value2" is passed to the jvm from
a bash variable. Therefore /usr/lib/ambari-infra-solr/bin/solr should be updated, and"$SOLR_KERB_NAME_RULES"
should be added directly into the command script.
> Options

This message was sent by Atlassian JIRA

View raw message