[
https://issues.apache.org/jira/browse/AMBARI-8976?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14292814#comment-14292814
]
Hudson commented on AMBARI-8976:
--------------------------------
SUCCESS: Integrated in Ambari-trunk-Commit #1611 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/1611/])
AMBARI-8976. Use cluster property rather than cluster-env/security_enabled to
enable or disable Kerberos. (rlevas via yusaku) (yusaku:
http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=f296ba851494ec9cb876e52f1ece6ed74592ca7d)
* ambari-server/src/main/resources/properties.json
*
ambari-server/src/main/java/org/apache/ambari/server/state/cluster/ClusterImpl.java
*
ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog200Test.java
* ambari-server/src/main/resources/Ambari-DDL-MySQL-CREATE.sql
*
ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java
* ambari-server/src/main/java/org/apache/ambari/server/state/SecurityType.java
* ambari-server/src/main/resources/Ambari-DDL-Oracle-CREATE.sql
* ambari-server/src/main/resources/Ambari-DDL-Postgres-CREATE.sql
*
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/ServiceResourceProvider.java
*
ambari-server/src/main/java/org/apache/ambari/server/controller/ClusterRequest.java
* ambari-server/src/main/resources/Ambari-DDL-SQLServer-CREATE.sql
*
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ClusterResourceProviderTest.java
*
ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelper.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariManagementControllerImplTest.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/ClusterResponseTest.java
* ambari-server/src/main/resources/Ambari-DDL-Postgres-EMBEDDED-CREATE.sql
*
ambari-server/src/test/java/org/apache/ambari/server/controller/ClusterRequestTest.java
*
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariManagementControllerImpl.java
*
ambari-server/src/main/java/org/apache/ambari/server/controller/ClusterResponse.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariManagementControllerTest.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/RefreshYarnCapacitySchedulerReleaseConfigTest.java
*
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog200.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariCustomCommandExecutionHelperTest.java
*
ambari-server/src/main/java/org/apache/ambari/server/orm/entities/ClusterEntity.java
* ambari-server/docs/api/v1/clusters-cluster.md
* ambari-server/src/main/java/org/apache/ambari/server/state/Cluster.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AbstractResourceProviderTest.java
*
ambari-server/src/main/java/org/apache/ambari/server/controller/internal/ClusterResourceProvider.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/BackgroundCustomCommandExecutionTest.java
> Use cluster property rather than cluster-env/security_enabled to enable or
> disable Kerberos
> -------------------------------------------------------------------------------------------
>
> Key: AMBARI-8976
> URL: https://issues.apache.org/jira/browse/AMBARI-8976
> Project: Ambari
> Issue Type: Task
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Blocker
> Labels: kerberos
> Fix For: 2.0.0
>
> Attachments: AMBARI-8976_01.patch, AMBARI-8976_02.patch
>
>
> Use a cluster property rather than {{cluster-env/security_enabled}} to enable
> or disable Kerberos. Since {{cluster-env/security_enabled}} is used by
> services to determine if Kerberos is enabled or not, it should not be set
> before completing the process of enabling or disabling Kerberos. To declare
> whether the cluster enable or disable Kerberos, a property on the cluster
> should be set. The property should be called {{security_type}} and must have
> one of the following values:
> * NONE
> * KERBEROS
> By using {{cluster-env/security_enabled}}, the configuration property gets
> set to "true" before Kerberos is filly enabled. This is causing issues with
> stopping services so that the updated Kerberos-related configurations can be
> set.
> Example API call to enable Kerberos
> {code:title=PUT /api/v1/clusters/c1}
> {
> "Clusters" : {
> "security_type" : "KERBEROS"
> }
> }
> {code}
> Example API call to disable Kerberos
> {code:title=PUT /api/v1/clusters/c1}
> {
> "Clusters" : {
> "security_type" : "NONE"
> }
> }
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
