[jira] [Created] (AMBARI-11629) Falcon version command failed on secure runs

[Robert Levas (JIRA)]

Robert Levas created AMBARI-11629:
-------------------------------------

             Summary: Falcon version command failed on secure runs
                 Key: AMBARI-11629
                 URL: https://issues.apache.org/jira/browse/AMBARI-11629
             Project: Ambari
          Issue Type: Bug
          Components: ambari-agent, ambari-server
    Affects Versions: 2.1.0
            Reporter: Robert Levas
            Assignee: Robert Levas
            Priority: Blocker
             Fix For: 2.1.0


After enabling Kerberos, the value for property 
*.falcon.http.authentication.kerberos.name.rules is set to 
{code}
RULE:[1:$1@$0](ambari...@example.com)s/.*/ambari-qa/
RULE:[1:$1@$0](h...@example.com)s/.*/hdfs/
RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@.*//
RULE:[2:$1@$0](amshb...@example.com)s/.*/ams/
RULE:[2:$1@$0](am...@example.com)s/.*/ams/
RULE:[2:$1@$0](d...@example.com)s/.*/hdfs/
RULE:[2:$1@$0](fal...@example.com)s/.*/falcon/
RULE:[2:$1@$0](h...@example.com)s/.*/hive/
RULE:[2:$1@$0](j...@example.com)s/.*/mapred/
RULE:[2:$1@$0](j...@example.com)s/.*/hdfs/
RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/
RULE:[2:$1@$0](n...@example.com)s/.*/yarn/
RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/
RULE:[2:$1@$0](oo...@example.com)s/.*/oozie/
RULE:[2:$1@$0](r...@example.com)s/.*/yarn/
RULE:[2:$1@$0](y...@example.com)s/.*/yarn/
DEFAULT
{code}

This is incorrect. The correct value should be 
{code}
RULE:[1:$1@$0](ambari...@example.com)s/.*/ambari-qa/ \
RULE:[1:$1@$0](h...@example.com)s/.*/hdfs/ \
RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@.*// \
RULE:[2:$1@$0](amshb...@example.com)s/.*/ams/ \
RULE:[2:$1@$0](am...@example.com)s/.*/ams/ \
RULE:[2:$1@$0](d...@example.com)s/.*/hdfs/ \
RULE:[2:$1@$0](fal...@example.com)s/.*/falcon/ \
RULE:[2:$1@$0](h...@example.com)s/.*/hive/ \
RULE:[2:$1@$0](j...@example.com)s/.*/mapred/ \
RULE:[2:$1@$0](j...@example.com)s/.*/hdfs/ \
RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/ \
RULE:[2:$1@$0](n...@example.com)s/.*/yarn/ \
RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/ \
RULE:[2:$1@$0](oo...@example.com)s/.*/oozie/ \
RULE:[2:$1@$0](r...@example.com)s/.*/yarn/ \
RULE:[2:$1@$0](y...@example.com)s/.*/yarn/ \
DEFAULT
{code}

Please notice the "\" at end of each RULE. This is needed because of the type 
of configuration file the data is in - a (Java) properties file, where 
properties values must be a single line or escaped if multi-lined. 

*Solution*
Convert the multi-line auth-to-local rule to meet the requirements of the 
configuration file type.






--
This message was sent by Atlassian JIRA
(v6.3.4#6332)