incubator-ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Aleksandr Kovalenko (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-2491) Security Wizard: show which principals and keytabs need to be created on which hosts
Date Wed, 26 Jun 2013 12:44:20 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-2491?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13693941#comment-13693941
] 

Aleksandr Kovalenko commented on AMBARI-2491:
---------------------------------------------

+1 for the patch.
                
> Security Wizard: show which principals and keytabs need to be created on which hosts
> ------------------------------------------------------------------------------------
>
>                 Key: AMBARI-2491
>                 URL: https://issues.apache.org/jira/browse/AMBARI-2491
>             Project: Ambari
>          Issue Type: Bug
>          Components: client
>    Affects Versions: 1.2.5
>            Reporter: Andrii Tkach
>            Assignee: Andrii Tkach
>            Priority: Critical
>             Fix For: 1.2.5
>
>         Attachments: AMBARI-2491.patch, host-component-principal-keytab-display.png
>
>
> Currently it is very difficult to know what principals and keytabs need to be created
on which hosts.
> We should present this information to the end user in a format that is easy to consume.
> The user running the wizard may not be the one who will be creating keytabs and principals.
We can expose the capability to download a csv file and send it to the appropriate person
who may parse the data to create a script to generate principals/keytabs (or do so manually).
> Display the attached as a popup after Configure Services step is done.
> Let's show it as a popup so that we don't affect any existing navigation/flow.
> For generating the content:
> Keytab paths are based on the user input
> Principal names are based on the user input
> NameNode host: show the nn and HTTP principals and keytab paths
> JobTracker host: show the jt principal and keytab path
> Oozie Server host: show the oozie and HTTP principals and keytab paths
> Nagios Server host: show the nagios principal and keytab path
> HBase Master host: show the hbase principal and keytab path
> Hive Server host: show the hive principal and keytab path
> WebHCat Server host: show the HTTP principal and keytab path
> ZooKeeper Server host: show the zookeeper principal and keytab path
> DataNode host: show the dn principal and keytab path
> TaskTracker host: show the tt principal and keytab path
> RegionServer host: show the hbase principal and keytab path
> If there are duplicated principals on the same host, display it only once.
> There are other rules, but please start with this.
> Clickng on "Download CSV" downloads the CSV file ("host-principal-keytab-list.csv").
The same content, except each row is a comma-delimited list with a \n at the end.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message