It seems like this will negate any host filter.  Have you tested regenerating 
keytab files for a specific host?  Also, does this break any operations related 
to cleaning up identities?

When I was testing this for a different patch, I believe that the 
`kerberosKeytabController.getFilteredKeytabs` call above found both service and 
user (headless) principals related to a given service. 


[ Full content available at: https://github.com/apache/ambari/pull/2359 ]
This message was relayed via gitbox.apache.org for [email protected]

Reply via email to