> On Feb. 12, 2016, 2:30 p.m., Robert Levas wrote: > > ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json, > > lines 30-31 > > <https://reviews.apache.org/r/43465/diff/1/?file=1240075#file1240075line30> > > > > The principal is declared as a *service*, however the princial name > > does not include the FQDN of the host the service. This is typically a bad > > practice. So if this identitiy is really a service-level identitiy, the > > principal name should be changed to `postgres/_HOST@@{realm}` or the `type` > > should be changed to `user`.
Thank you for pointing that out. will fix this as well. (Chaning it to "user" as there is the HAWQ limitation stated at Feb. 12, 2016, 12:27 a.m. ) - jun ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/43465/#review119016 ----------------------------------------------------------- On Feb. 11, 2016, 1 a.m., jun aoki wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/43465/ > ----------------------------------------------------------- > > (Updated Feb. 11, 2016, 1 a.m.) > > > Review request for Ambari. > > > Bugs: AMBARI-15001 > https://issues.apache.org/jira/browse/AMBARI-15001 > > > Repository: ambari > > > Description > ------- > > This is to add hdfs keytab for hawq nodes. > Currently HAWQ's service check fails due to data clean up after service check > is completed and causes a false negative. > > > Diffs > ----- > > ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json > cc11c15 > > Diff: https://reviews.apache.org/r/43465/diff/ > > > Testing > ------- > > Locally teted. > > > Thanks, > > jun aoki > >
