-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/31422/
-----------------------------------------------------------

Review request for Ambari, Emil Anca, Jaimin Jetly, and Yusaku Sako.


Bugs: AMBARI-9786
    https://issues.apache.org/jira/browse/AMBARI-9786


Repository: ambari


Description
-------

The local user mapping for the hdfs headless principal not set in Kerberos 
descriptor.  It should be set to `hadoop-env/hdfs_user`


Diffs
-----

  ambari-server/src/main/resources/stacks/HDP/2.0.6/kerberos.json 271fffd 

Diff: https://reviews.apache.org/r/31422/diff/


Testing
-------

Manually tested in cluster and found expetected auth-to-local rules generated:

```
RULE:[1:$1@$0]([email protected])s/.*/ambari-qa/
RULE:[1:$1@$0]([email protected])s/.*/hdfs/
RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@.*//
RULE:[2:$1@$0]([email protected])s/.*/hdfs/
RULE:[2:$1@$0]([email protected])s/.*/hdfs/
RULE:[2:$1@$0]([email protected])s/.*/hdfs/
DEFAULT
```

See `RULE:[1:$1@$0]([email protected])s/.*/hdfs/` and 
`RULE:[1:$1@$0]([email protected])s/.*/ambari-qa/`


Thanks,

Robert Levas

Reply via email to