Dilli Arumugam created AMBARI-8873:
--------------------------------------
Summary: ADKerberosOperationHandler should not add domain suffix
in SPN
Key: AMBARI-8873
URL: https://issues.apache.org/jira/browse/AMBARI-8873
Project: Ambari
Issue Type: Bug
Reporter: Dilli Arumugam
Assignee: Dilli Arumugam
ADKeberosOperationHandler at present adds windows domain name as suffix in
service principal name.
See the code snippet
Attribute spn = new BasicAttribute("servicePrincipalName");
spn.add(principal + "@" + realm.toUpperCase());
attributes.put(spn);
This worked find in Windows Server 2012.
But breaks in Windows Server 2008.
We can not get service ticket for a principal created with service principal
name like
nn/[email protected]
We have to set the service principal name without domain name suffix, fro
example
nn/ambari
to work correctly in Windows Server 2008 and Windows Server 2012.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
