Robert Levas created AMBARI-9385:
------------------------------------
Summary: Implement Keytab regeneration
Key: AMBARI-9385
URL: https://issues.apache.org/jira/browse/AMBARI-9385
Project: Ambari
Issue Type: Task
Components: ambari-server
Affects Versions: 2.0.0
Reporter: Robert Levas
Assignee: Robert Levas
Fix For: 2.0.0
Create API entry point to initiate Kerberos keytab regeneration for the cluster:
{code}
PUT /api/v1/clusters/{clustername}?kerberos_regenerate_keytabs="true"
{code}
The entry point should invoke code to determine which principals need to be
updated and then generate the following stages:
# Update Principal Passwords
# Generate Keytabs
# Distribute Keytab
This could be done in a method within
{{org.apache.ambari.server.controller.KerberosHelper}} named
{{regenerateKeytabs}} and flow similarly to
{{org.apache.ambari.server.controller.KerberosHelper#toggleKerberos}}
A Server-side action implementation already exists for generating keytabs - see
{{org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAction}}.
A process is already in place to distribute keytabs -
{{org/apache/ambari/server/controller/KerberosHelper.java:1192}}
A new Server-side action _may_ need to be created to update relavant principal
passwords, however
{{org.apache.ambari.server.serveraction.kerberos.CreatePrincipalsServerAction}}
may work for this, unaltered.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
