----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/43465/#review119016 -----------------------------------------------------------
ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json (lines 30 - 31) <https://reviews.apache.org/r/43465/#comment180313> The principal is declared as a *service*, however the princial name does not include the FQDN of the host the service. This is typically a bad practice. So if this identitiy is really a service-level identitiy, the principal name should be changed to `postgres/_HOST@@{realm}` or the `type` should be changed to `user`. ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json (lines 52 - 53) <https://reviews.apache.org/r/43465/#comment180314> Same service vs user identity issues mentioned above. - Robert Levas On Feb. 10, 2016, 8 p.m., jun aoki wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/43465/ > ----------------------------------------------------------- > > (Updated Feb. 10, 2016, 8 p.m.) > > > Review request for Ambari. > > > Bugs: AMBARI-15001 > https://issues.apache.org/jira/browse/AMBARI-15001 > > > Repository: ambari > > > Description > ------- > > This is to add hdfs keytab for hawq nodes. > Currently HAWQ's service check fails due to data clean up after service check > is completed and causes a false negative. > > > Diffs > ----- > > ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json > cc11c15 > > Diff: https://reviews.apache.org/r/43465/diff/ > > > Testing > ------- > > Locally teted. > > > Thanks, > > jun aoki > >
