[
https://issues.apache.org/jira/browse/AMBARI-8336?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-8336:
---------------------------------
Description:
In order to track which services and components have been or need to be
secured, several tables need to be updated with a {{security_state}} column to
contain one the following values:
/**
* Indicates that it is not known whether the service or component is secured
or not
*/
UNKNOWN,
/**
* Indicates service or component is not or should not be secured
*/
UNSECURED,
/**
* Indicates component is or should be secured using Kerberos
*/
SECURED_KERBEROS,
/**
* Indicates the component is in the process of being secured
*/
SECURING,
/**
* Indicates the component is in the process of being unsecured
*/
UNSECURING,
/**
* Indicates the component is not secured due to an error condition
*/
ERROR;
* {{UNKNOWN}} - Indicates the state is unknown
* {{OFF}} - Indicates the service or component is not or should not be
Kerberized
* {{ON}} - Indicates the service or component is or should be Kerberized
* {{IN_PROGRESS}} - Indicates the component is in the process of being
Kerberized
* {{ERROR}} - Indicates the component cannot or failed to be Kerberized
The following tables need to be updated:
* hostcomponentdesiredstate - To indicate whether the component needs Kerberos
added or removed ({{OFF}}, {{ON}})
* hostcomponentstate - To indicate whether the component is currently
configured for Kerberos or not ({{OFF}}, {{IN_PROGRESS}}, {{ON}}, {{ERROR}},
{{UNKNOWN}})
* servicedesiredstate - To indicate whether the service (and it components)
should or should not be Kerberized ({{OFF}}, {{ON}})
was:
In order to track which services and components have been or need to be
_Kerberized_ several tables need to be updated with a {{kerberos_state}} column
to contain one the following values:
* {{UNKNOWN}} - Indicates the state is unknown
* {{OFF}} - Indicates the service or component is not or should not be
Kerberized
* {{ON}} - Indicates the service or component is or should be Kerberized
* {{IN_PROGRESS}} - Indicates the component is in the process of being
Kerberized
* {{ERROR}} - Indicates the component cannot or failed to be Kerberized
The following tables need to be updated:
* hostcomponentdesiredstate - To indicate whether the component needs Kerberos
added or removed ({{OFF}}, {{ON}})
* hostcomponentstate - To indicate whether the component is currently
configured for Kerberos or not ({{OFF}}, {{IN_PROGRESS}}, {{ON}}, {{ERROR}},
{{UNKNOWN}})
* servicedesiredstate - To indicate whether the service (and it components)
should or should not be Kerberized ({{OFF}}, {{ON}})
> Add Security State to Ambari database
> -------------------------------------
>
> Key: AMBARI-8336
> URL: https://issues.apache.org/jira/browse/AMBARI-8336
> Project: Ambari
> Issue Type: New Feature
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Blocker
> Labels: kerberos
> Fix For: 2.0.0
>
> Attachments: AMBARI-8336_01.patch, AMBARI-8336_02.patch
>
>
> In order to track which services and components have been or need to be
> secured, several tables need to be updated with a {{security_state}} column
> to contain one the following values:
> /**
> * Indicates that it is not known whether the service or component is
> secured or not
> */
> UNKNOWN,
> /**
> * Indicates service or component is not or should not be secured
> */
> UNSECURED,
> /**
> * Indicates component is or should be secured using Kerberos
> */
> SECURED_KERBEROS,
> /**
> * Indicates the component is in the process of being secured
> */
> SECURING,
> /**
> * Indicates the component is in the process of being unsecured
> */
> UNSECURING,
> /**
> * Indicates the component is not secured due to an error condition
> */
> ERROR;
> * {{UNKNOWN}} - Indicates the state is unknown
> * {{OFF}} - Indicates the service or component is not or should not be
> Kerberized
> * {{ON}} - Indicates the service or component is or should be Kerberized
> * {{IN_PROGRESS}} - Indicates the component is in the process of being
> Kerberized
> * {{ERROR}} - Indicates the component cannot or failed to be Kerberized
> The following tables need to be updated:
> * hostcomponentdesiredstate - To indicate whether the component needs
> Kerberos added or removed ({{OFF}}, {{ON}})
> * hostcomponentstate - To indicate whether the component is currently
> configured for Kerberos or not ({{OFF}}, {{IN_PROGRESS}}, {{ON}}, {{ERROR}},
> {{UNKNOWN}})
> * servicedesiredstate - To indicate whether the service (and it components)
> should or should not be Kerberized ({{OFF}}, {{ON}})
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
