ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Eric Yang (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-20948) FreeIPA managed HTTP principals are removed by Ambari forcefully
Date Sat, 06 May 2017 18:27:04 GMT
Eric Yang created AMBARI-20948:
----------------------------------

             Summary: FreeIPA managed HTTP principals are removed by Ambari forcefully
                 Key: AMBARI-20948
                 URL: https://issues.apache.org/jira/browse/AMBARI-20948
             Project: Ambari
          Issue Type: Bug
            Reporter: Eric Yang


When system administrator use FreeIPA to manage SSL certificates, FreeIPA also generates SPNEGO
HTTP principals for each of the described subject alternate names.  This can automatically
help to renew SSL certificate and SPNEGO HTTP principals on expiration date.  Ambari will
try to forcefully remove any HTTP principals generated for Ambari agent nodes.  This breaks
FreeIPA managed SSL certificate and Kerberos HTTP principals.  It would be nice to preserve
and use FreeIPA generated SSL certificate and SPNEGO principals with automated-renewal process



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message