ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-22293) Improve KDC integration
Date Wed, 25 Oct 2017 14:10:03 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-22293?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas updated AMBARI-22293:
----------------------------------
    Description: 
Improve KDC integration by making the interfaces more consistent with each other.

Improve KDC integration by making the interfaces more consistent with each other.

*NOTE*: For MIT KDC, the following algorithm must be removed from the set used when exporting
keytab files: {{des-hmac-sha1:normal}}.  This is done by changing the {{supported_enctypes}}
property in the {{kdc.conf}} file, typically at {{/var/kerberos/krb5kdc/kdc.conf}}. For example:
{noformat:title=From}
  supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal
des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
{noformat}
{noformat:title=To}
  supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal
des-cbc-md5:normal des-cbc-crc:normal
{noformat}

  was:
Improve KDC integration by making the interfaces more consistent with each other.



> Improve KDC integration
> -----------------------
>
>                 Key: AMBARI-22293
>                 URL: https://issues.apache.org/jira/browse/AMBARI-22293
>             Project: Ambari
>          Issue Type: Task
>          Components: ambari-server
>    Affects Versions: 3.0.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>              Labels: kerberos
>             Fix For: 3.0.0
>
>
> Improve KDC integration by making the interfaces more consistent with each other.
> Improve KDC integration by making the interfaces more consistent with each other.
> *NOTE*: For MIT KDC, the following algorithm must be removed from the set used when exporting
keytab files: {{des-hmac-sha1:normal}}.  This is done by changing the {{supported_enctypes}}
property in the {{kdc.conf}} file, typically at {{/var/kerberos/krb5kdc/kdc.conf}}. For example:
> {noformat:title=From}
>   supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal
des-hmac-sha1:normal des-cbc-md5:normal des-cbc-crc:normal
> {noformat}
> {noformat:title=To}
>   supported_enctypes = aes256-cts:normal aes128-cts:normal des3-hmac-sha1:normal arcfour-hmac:normal
des-cbc-md5:normal des-cbc-crc:normal
> {noformat}



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message