[jira] [Commented] (AMBARI-11629) Falcon version command failed on secure runs

[Hudson (JIRA)]

    [ 
https://issues.apache.org/jira/browse/AMBARI-11629?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14571990#comment-14571990
 ] 

Hudson commented on AMBARI-11629:
---------------------------------

SUCCESS: Integrated in Ambari-trunk-Commit #2804 (See 
[https://builds.apache.org/job/Ambari-trunk-Commit/2804/])
AMBARI-11629. Falcon version command failed on secure runs (rlevas) (rlevas: 
http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=a86701cc465a8e32ce92e713eeedf76bc52a03bc)
* 
ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
* 
ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java
* 
ambari-server/src/main/java/org/apache/ambari/server/controller/AuthToLocalBuilder.java
* 
ambari-server/src/main/resources/common-services/FALCON/0.5.0.2.1/kerberos.json


> Falcon version command failed on secure runs
> --------------------------------------------
>
>                 Key: AMBARI-11629
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11629
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-agent, ambari-server
>    Affects Versions: 2.1.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>            Priority: Blocker
>              Labels: kerberos
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-11629_01.patch
>
>
> After enabling Kerberos, the value for property 
> *.falcon.http.authentication.kerberos.name.rules is set to 
> {code}
> RULE:[1:$1@$0](ambari...@example.com)s/.*/ambari-qa/
> RULE:[1:$1@$0](h...@example.com)s/.*/hdfs/
> RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@.*//
> RULE:[2:$1@$0](amshb...@example.com)s/.*/ams/
> RULE:[2:$1@$0](am...@example.com)s/.*/ams/
> RULE:[2:$1@$0](d...@example.com)s/.*/hdfs/
> RULE:[2:$1@$0](fal...@example.com)s/.*/falcon/
> RULE:[2:$1@$0](h...@example.com)s/.*/hive/
> RULE:[2:$1@$0](j...@example.com)s/.*/mapred/
> RULE:[2:$1@$0](j...@example.com)s/.*/hdfs/
> RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/
> RULE:[2:$1@$0](n...@example.com)s/.*/yarn/
> RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/
> RULE:[2:$1@$0](oo...@example.com)s/.*/oozie/
> RULE:[2:$1@$0](r...@example.com)s/.*/yarn/
> RULE:[2:$1@$0](y...@example.com)s/.*/yarn/
> DEFAULT
> {code}
> This is incorrect. The correct value should be 
> {code}
> RULE:[1:$1@$0](ambari...@example.com)s/.*/ambari-qa/ \
> RULE:[1:$1@$0](h...@example.com)s/.*/hdfs/ \
> RULE:[1:$1@$0](.*@EXAMPLE.COM)s/@.*// \
> RULE:[2:$1@$0](amshb...@example.com)s/.*/ams/ \
> RULE:[2:$1@$0](am...@example.com)s/.*/ams/ \
> RULE:[2:$1@$0](d...@example.com)s/.*/hdfs/ \
> RULE:[2:$1@$0](fal...@example.com)s/.*/falcon/ \
> RULE:[2:$1@$0](h...@example.com)s/.*/hive/ \
> RULE:[2:$1@$0](j...@example.com)s/.*/mapred/ \
> RULE:[2:$1@$0](j...@example.com)s/.*/hdfs/ \
> RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/ \
> RULE:[2:$1@$0](n...@example.com)s/.*/yarn/ \
> RULE:[2:$1@$0](n...@example.com)s/.*/hdfs/ \
> RULE:[2:$1@$0](oo...@example.com)s/.*/oozie/ \
> RULE:[2:$1@$0](r...@example.com)s/.*/yarn/ \
> RULE:[2:$1@$0](y...@example.com)s/.*/yarn/ \
> DEFAULT
> {code}
> Please notice the "\" at end of each RULE. This is needed because of the type 
> of configuration file the data is in - a (Java) properties file, where 
> properties values must be a single line or escaped if multi-lined. 
> *Solution*
> Convert the multi-line auth-to-local rule to meet the requirements of the 
> configuration file type by allowing the _concatenation type_ to be specified 
> in the Kerberos descriptor.  The following concatenation types are allowed:
> * *new lines* - each rule is separated by a new line 
> * *new_lines_escaped* - each rule is separated by an escaped new line
> * *spaces* - each rule is separated by a whitespace charater



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)