ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-21919) Kerberos identity references should use the "reference" attribute
Date Thu, 21 Sep 2017 16:03:00 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-21919?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16175005#comment-16175005
] 

Hudson commented on AMBARI-21919:
---------------------------------

FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #8114 (See [https://builds.apache.org/job/Ambari-trunk-Commit/8114/])
AMBARI-21919. Kerberos identity references should use the "reference" (rlevas: [http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=2a0602104f719d8dec7cc34f9a10fe885d55a551])
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEHDFS/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/ATLAS/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEYARN/kerberos.json
* (edit) ambari-server/src/main/resources/kerberos_descriptor_schema.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/GRUMPY/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/TEZ/0.9.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/SNOW/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/HIVE/2.1.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/TEZ/0.4.0.2.1/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/SUPERSET/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEHBASE/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/SPARK/1.2.1/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/HBASE/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/FALCON/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/STORM/1.0.1.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/STORM/1.1.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/ECS/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/YARN/3.0.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/SPARK2/2.0.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/KNOX/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/SPARK2/kerberos.json
* (edit) ambari-server/src/main/java/org/apache/ambari/server/state/kerberos/KerberosDescriptor.java
* (edit) contrib/management-packs/hdf-ambari-mpack/src/main/resources/stacks/HDF/2.0/services/KAFKA/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/SPARK/2.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/HBASE/2.0.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3/services/TEZ/kerberos.json
* (edit) ambari-server/src/main/java/org/apache/ambari/server/state/kerberos/AbstractKerberosDescriptorContainer.java
* (edit) ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog260.java
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/DRUID/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/YARN/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/STORM/1.0.1/kerberos.json
* (edit) ambari-funtest/src/test/resources/stacks/HDP/2.0.8/services/HDFS/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER_KMS/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/KAFKA/0.10.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/AMBARI_METRICS/0.1.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/HBASE/kerberos.json
* (edit) ambari-server/src/test/resources/stacks/HDP/2.0.8/services/HDFS/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/SPARK/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/KAFKA/0.10.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json
* (edit) ambari-server/src/test/resources/kerberos/test_kerberos_descriptor_ranger_kms.json
* (edit) contrib/management-packs/microsoft-r_mpack/src/main/resources/common-services/MICROSOFT_R_SERVER/8.0.5/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/HDFS/3.0.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/SLIDER/0.91.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/LOGSEARCH/0.5.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/RANGER/1.0.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/KNOX/0.5.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/HAPPY/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/SLIDER/0.60.0.2.2/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/ATLAS/0.7.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/FALCON/0.5.0.2.1/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/AMBARI_INFRA/0.1.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/SPARK/1.4.1/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.2/services/YARN/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/OOZIE/4.2.0.2.3/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/kerberos.json
* (edit) contrib/management-packs/odpi-ambari-mpack/src/main/resources/stacks/ODPi/2.0/services/HIVE/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3/services/YARN/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/OOZIE/4.2.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/HDFS/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/SLEEPY/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-30/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/ATLAS/0.7.0.2.5/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/ACCUMULO/1.6.1.2.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/HDFS/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/ZOOKEEPER/3.4.5/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEZOOKEEPER/kerberos.json
* (edit) contrib/management-packs/hdf-ambari-mpack/src/main/resources/common-services/NIFI/1.0.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/STORM/0.9.1/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/kerberos.json
* (edit) contrib/management-packs/odpi-ambari-mpack/src/main/resources/stacks/ODPi/2.0/services/YARN/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3/services/ACCUMULO/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/PIG/0.16.1.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.6/services/OOZIE/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/PIG/0.12.0.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json
* (edit) ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog260Test.java
* (edit) ambari-server/src/main/resources/stacks/HDP/2.5/services/SPARK/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/RANGER_KMS/1.0.0.3.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/MAHOUT/1.0.0.2.3/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/OOZIE/4.0.0.2.0/kerberos.json
* (edit) ambari-server/src/main/resources/common-services/ZEPPELIN/0.7.0/kerberos.json
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3.GlusterFS/services/ACCUMULO/kerberos.json


> Kerberos identity references should use the "reference" attribute
> -----------------------------------------------------------------
>
>                 Key: AMBARI-21919
>                 URL: https://issues.apache.org/jira/browse/AMBARI-21919
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.4.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>              Labels: kerberos_descriptor
>             Fix For: 2.6.0
>
>         Attachments: AMBARI-21919_branch-2.6_01.patch, AMBARI-21919_branch-2.6_02.patch,
AMBARI-21919_trunk_01.patch, AMBARI-21919_trunk_02.patch
>
>
> Kerberos identity references should use the "reference" attribute rather than rely on
the "name" attribute to indicate the identity descriptor references some other identity descriptor.
 
> Either method should work on the backend, however the UI appears to not fully handle
the "named" reference properly. 
> The solution is to change 
> {code}
>             {
>               "name": "/HDFS/NAMENODE/namenode_nn",
>               "principal": {
>                 "configuration": "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.principal"
>               },
>               "keytab": {
>                 "configuration": "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.keyTab"
>               }
>             }
> {code}
> by changing the "name" attribute to "reference" and adding a new "name" reference with
a unique name relative to the scope of the identity descriptor. For example:
> {code}
>             {
>               "name":"ranger_hdfs_audit"
>               "reference": "/HDFS/NAMENODE/namenode_nn",
>               "principal": {
>                 "configuration": "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.principal"
>               },
>               "keytab": {
>                 "configuration": "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.keyTab"
>               }
>             }
> {code}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message