[
https://issues.apache.org/jira/browse/AMBARI-8873?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dilli Arumugam updated AMBARI-8873:
-----------------------------------
Component/s: ambari-server
Affects Version/s: 2.0.0
Fix Version/s: 2.0.0
> ADKerberosOperationHandler should not add domain suffix in SPN
> --------------------------------------------------------------
>
> Key: AMBARI-8873
> URL: https://issues.apache.org/jira/browse/AMBARI-8873
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Dilli Arumugam
> Assignee: Dilli Arumugam
> Fix For: 2.0.0
>
>
> ADKeberosOperationHandler at present adds windows domain name as suffix in
> service principal name.
> See the code snippet
> Attribute spn = new BasicAttribute("servicePrincipalName");
> spn.add(principal + "@" + realm.toUpperCase());
> attributes.put(spn);
> This worked find in Windows Server 2012.
> But breaks in Windows Server 2008.
> We can not get service ticket for a principal created with service principal
> name like
> nn/[email protected]
> We have to set the service principal name without domain name suffix, fro
> example
> nn/ambari
> to work correctly in Windows Server 2008 and Windows Server 2012.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
