[
https://issues.apache.org/jira/browse/AMBARI-14376?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-14376:
----------------------------------
Description:
Create a KerberosHelper method to create the headless Kerberos identities and
keytab files (inline).
This can be used to create the common identities and keytab files before
parallel invocations attempt to do so. Due to a race condition, parallel
invocations of the server-side actions to create principals and keytab files
may lead to invalid keytab files being distributed to some host because the
password contained in them were clobbered.
By calling this new method before calls to install and start services the
potential of the race condition will be avoided.
{code}
boolean ensureHeadlessIdentities(Cluster cluster, Map<String, Map<String,
String>> existingConfigurations, Set<String> services)
throws KerberosInvalidConfigurationException, AmbariException;
{code}
was:
Create a KerberosHelper method to create the headless Kerberos identities and
keytab files (inline).
This can be used to create the common identities and keytab files before
parallel invocations attempt to do so. Due to a race condition, parallel
invocations of the server-side actions to create principals and keytab files
may lead to invalid keytab files being distributed to some host because the
password contained in them were clobbered.
By calling this new method before calls to install and start services the
potential of the race condition will be avoided.
{code}
boolean createHeadlessKerberosIdentities(Cluster cluster, Map<String,
Map<String, String>> existingConfigurations, Set<String> services)
{code}
> Create KerberosHelper method to create the headless Kerberos identities and
> keytab files (inline)
> -------------------------------------------------------------------------------------------------
>
> Key: AMBARI-14376
> URL: https://issues.apache.org/jira/browse/AMBARI-14376
> Project: Ambari
> Issue Type: Task
> Components: ambari-server
> Affects Versions: 2.2.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Fix For: 2.3.0
>
> Attachments: AMBARI-14376_trunk_01.patch
>
>
> Create a KerberosHelper method to create the headless Kerberos identities and
> keytab files (inline).
> This can be used to create the common identities and keytab files before
> parallel invocations attempt to do so. Due to a race condition, parallel
> invocations of the server-side actions to create principals and keytab files
> may lead to invalid keytab files being distributed to some host because the
> password contained in them were clobbered.
> By calling this new method before calls to install and start services the
> potential of the race condition will be avoided.
> {code}
> boolean ensureHeadlessIdentities(Cluster cluster, Map<String, Map<String,
> String>> existingConfigurations, Set<String> services)
> throws KerberosInvalidConfigurationException, AmbariException;
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
