-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/42256/
-----------------------------------------------------------
Review request for Ambari, atlas, John Speidel, and Robert Levas.
Bugs: AMBARI-14628
https://issues.apache.org/jira/browse/AMBARI-14628
Repository: ambari
Description
-------
Ambari should create the JAAS config for Atlas automatically when the cluster
is Kerberized.
When Atlas is configured with HBase as the storage backend in a secure cluster,
a JAAS configuration file should be created and specified so that the HBase
client can attempt to SASL-authenticate.
Create Atlas JAAS configuration file (e.g. /etc/atlas/conf/atlas-jaas.conf).
Client {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
useTicketCache=false
storeKey=true
doNotPrompt=false
keyTab="<atlas keytab>"
principal="<atlas principal>";
};
Update Atlas METADATA_OPTS to include ‘java.security.auth.login.config’ set to
the above Atlas JAAS configuration file.
For example,
{{-Djava.security.auth.login.config=/etc/atlas/conf/atlas-jaas.conf}}.
Diffs
-----
ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/configuration/atlas-env.xml
2935e8f
ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/package/scripts/metadata.py
8c17214
ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/package/scripts/params.py
df8b772
ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/package/templates/atlas_jaas.conf.j2
PRE-CREATION
ambari-server/src/test/python/stacks/2.3/ATLAS/test_metadata_server.py
2bd02c7
ambari-server/src/test/python/stacks/2.3/configs/secure.json PRE-CREATION
Diff: https://reviews.apache.org/r/42256/diff/
Testing
-------
Manual tested in kerberized cluster with Atlas.
All unit tests pass ...
mvn clean test
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 01:02 h
[INFO] Finished at: 2016-01-13T13:57:37-05:00
[INFO] Final Memory: 41M/1499M
[INFO] ------------------------------------------------------------------------
Thanks,
Tom Beerbower
