-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/33192/
-----------------------------------------------------------
Review request for Ambari, Jaimin Jetly, Robert Nettleton, and Yusaku Sako.
Bugs: AMBARI-10479
https://issues.apache.org/jira/browse/AMBARI-10479
Repository: ambari
Description
-------
Add the ability to enable Kerberos and not manage identities. This should be
done by allowing a user to specify whether all relevant Kerberos identities
_should_ or _should not_ be managed by Ambari.
A *kerberos-env* property named *manage_identities* is to be added where its
value may be either _true_ or _false_. By default the value is _true_ (or
rather _not false_).
If _not false_, Ambari will access the registered KDC to create, update, and
delete Kerberos identities as needed. Ambari will also create, distribute, and
delete keytab files as needed. Because of this, the KDC administrator
credentials are required. This is the current behavior of Ambari 2.0.0.
If _false_, Ambari will *not* access the registered KDC to create, update, or
delete Kerberos identities. It will also *not* create, distribute, or delete
keytab files. Not KDC administrator credentials will be needed.
Note: a lot of this work has been done for AMBARI-10305. A current known
problem with the solution for AMBARI-10305 is that the Kerberos service check
fails when kerberos-env/manage_identities is false due to missing data since
the special smoke user was not created.
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelper.java
5cd75bb
ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/package/scripts/params.py
5482f6c
ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/package/scripts/service_check.py
b8cb384
ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
ee11ee7
Diff: https://reviews.apache.org/r/33192/diff/
Testing
-------
Manually tested
**Local test results:**
Running org.apache.ambari.server.controller.KerberosHelperTest
Tests run: 32, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 2.228 sec
Tests run: 2860, Failures: 0, Errors: 0, Skipped: 16
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 39:49.326s
[INFO] Finished at: Tue Apr 14 16:59:54 EDT 2015
[INFO] Final Memory: 86M/1028M
[INFO] ------------------------------------------------------------------------
**Jenkins test results: PENDING**
Thanks,
Robert Levas
