-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/34051/
-----------------------------------------------------------

Review request for Ambari, Arpit Gupta and Sowmya Ramesh.


Bugs: AMBARI-11043
    https://issues.apache.org/jira/browse/AMBARI-11043


Repository: ambari


Description
-------

```
# falcon admin -version
ERROR: Unable to initialize Falcon Client object
```

#Solution 
_(proposed by Falcon developers)_
The *.falcon.http.authentication.kerberos.name.rules need to be uodated such 
that they are the same as hadoop.security.auth_to_local. To do this, add the 
following under the relevant service item in the Falcon kerberos.json file:

```   
"auth_to_local_properties" : [
        
"falcon-startup.properties/*.falcon.http.authentication.kerberos.name.rules"
      ],
```

For example:

```
{
  "services": [
    {
      "name": "FALCON",
      ...
      "auth_to_local_properties" : [
        
"falcon-startup.properties/*.falcon.http.authentication.kerberos.name.rules"
      ],
      ...
   }
 ]
}
```


Diffs
-----

  
ambari-server/src/main/resources/common-services/FALCON/0.5.0.2.1/kerberos.json 
6f34933 

Diff: https://reviews.apache.org/r/34051/diff/


Testing
-------

Manaully tested to see if `falcon admin -version` worked in Kerberized cluster 
(as [email protected] and as HTTP/[email protected])


Thanks,

Robert Levas

Reply via email to