[
https://issues.apache.org/jira/browse/AMBARI-8336?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-8336:
---------------------------------
Description:
In order to track which services and components have been or need to be
secured, several tables need to be updated with a {{security_state}} column to
contain one the following values:
* {{UNKNOWN}} - Indicates that it is not known whether the service or component
is secured or not
* {{UNSECURED}} - Indicates service or component is not or should not be secured
* {{SECURED_KERBEROS}} - Indicates component is or should be secured using
Kerberos
* {{SECURING}} - Indicates the component is in the process of being secured
* {{UNSECURING}} - Indicates the component is in the process of being unsecured
* {{ERROR}} - Indicates the component is not secured due to an error condition
The following tables need to be updated:
* hostcomponentdesiredstate - To indicate whether the component needs security
added or removed
* hostcomponentstate - To indicate whether the component is currently
configured for security or not
* servicedesiredstate - To indicate whether the service (and it components)
should or should not be secured
was:
In order to track which services and components have been or need to be
secured, several tables need to be updated with a {{security_state}} column to
contain one the following values:
/**
* Indicates that it is not known whether the service or component is secured
or not
*/
UNKNOWN,
/**
* Indicates service or component is not or should not be secured
*/
UNSECURED,
/**
* Indicates component is or should be secured using Kerberos
*/
SECURED_KERBEROS,
/**
* Indicates the component is in the process of being secured
*/
SECURING,
/**
* Indicates the component is in the process of being unsecured
*/
UNSECURING,
/**
* Indicates the component is not secured due to an error condition
*/
ERROR;
* {{UNKNOWN}} - Indicates the state is unknown
* {{OFF}} - Indicates the service or component is not or should not be
Kerberized
* {{ON}} - Indicates the service or component is or should be Kerberized
* {{IN_PROGRESS}} - Indicates the component is in the process of being
Kerberized
* {{ERROR}} - Indicates the component cannot or failed to be Kerberized
The following tables need to be updated:
* hostcomponentdesiredstate - To indicate whether the component needs Kerberos
added or removed ({{OFF}}, {{ON}})
* hostcomponentstate - To indicate whether the component is currently
configured for Kerberos or not ({{OFF}}, {{IN_PROGRESS}}, {{ON}}, {{ERROR}},
{{UNKNOWN}})
* servicedesiredstate - To indicate whether the service (and it components)
should or should not be Kerberized ({{OFF}}, {{ON}})
> Add Security State to Ambari database
> -------------------------------------
>
> Key: AMBARI-8336
> URL: https://issues.apache.org/jira/browse/AMBARI-8336
> Project: Ambari
> Issue Type: New Feature
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Blocker
> Labels: kerberos
> Fix For: 2.0.0
>
> Attachments: AMBARI-8336_01.patch, AMBARI-8336_02.patch
>
>
> In order to track which services and components have been or need to be
> secured, several tables need to be updated with a {{security_state}} column
> to contain one the following values:
> * {{UNKNOWN}} - Indicates that it is not known whether the service or
> component is secured or not
> * {{UNSECURED}} - Indicates service or component is not or should not be
> secured
> * {{SECURED_KERBEROS}} - Indicates component is or should be secured using
> Kerberos
> * {{SECURING}} - Indicates the component is in the process of being secured
> * {{UNSECURING}} - Indicates the component is in the process of being
> unsecured
> * {{ERROR}} - Indicates the component is not secured due to an error condition
> The following tables need to be updated:
> * hostcomponentdesiredstate - To indicate whether the component needs
> security added or removed
> * hostcomponentstate - To indicate whether the component is currently
> configured for security or not
> * servicedesiredstate - To indicate whether the service (and it components)
> should or should not be secured
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
