> On June 25, 2015, 10:12 a.m., Andrew Onischuk wrote:
> > How will it work after ambari upgrade when this file won't be present?
>
> Robert Levas wrote:
> I am not sure I understand. Why wont 'this file' (`kerberos.json`?) be
> present after the upgrade?
>
> Andrew Onischuk wrote:
> Maybe I'm wrong. But it is possible that storm.headless.keytab is not
> present when user upgrades ambari to 2.1? (user with Ambari-2.0 would have
> storm.service.keytab instead as far as I understand)
Maybe you are referring to `${keytab_dir}/storm.headless.keytab`. Once
established, the `kerberos.json` file doesn't come into place. So if Storm was
previously Kerberized, whatever the keytab file was as the time will remain and
not be an issue. This change only affects newly Kerberized clusters.
- Robert
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89348
-----------------------------------------------------------
On June 25, 2015, 10:10 a.m., Robert Levas wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
>
> (Updated June 25, 2015, 10:10 a.m.)
>
>
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and
> Vitalyi Brodetskyi.
>
>
> Bugs: AMBARI-12137
> https://issues.apache.org/jira/browse/AMBARI-12137
>
>
> Repository: ambari
>
>
> Description
> -------
>
> The storm user principals should be derived using the storm user + cluster
> name:
> ```
> storm-${cluster_name}@${realm}
> ```
>
> The keytab name should be consistent with other headless identities:
> ```
> storm.headless.keytab
> ```
>
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
>
>
> Diffs
> -----
>
>
> ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json
> 94eaae1
> ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json
> b1022c3
>
> ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig
> 29b9c83
> ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0
> ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json
> 3ae6941
> ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e
>
> Diff: https://reviews.apache.org/r/35875/diff/
>
>
> Testing
> -------
>
> Manual testing
>
> Local unit test passed
>
> #Jenkins test results: PENDING
>
>
> Thanks,
>
> Robert Levas
>
>
