Robert Levas created AMBARI-17988:
-------------------------------------

             Summary: Allow multiple configurations for a Kerberos identity 
principal and keytab definition
                 Key: AMBARI-17988
                 URL: https://issues.apache.org/jira/browse/AMBARI-17988
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.4.0
            Reporter: Robert Levas
            Assignee: Robert Levas
            Priority: Blocker
             Fix For: 2.4.0


Allow multiple configurations for a Kerberos identity principal and keytab 
definition.

Currently we allow:

{code}
{
              "name": "some_name",
              "principal": {
                "value": "foobar/_HOST@${realm}",
                "type" : "service",
                "configuration": "config1/property1",
                "local_username" : "${hadoop-env/hdfs_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/foobar.service.keytab",
                "owner": {
                  "name": "${config-env/foobar_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configuration": "config1/property2"
              }
            },
{code}

but we should allow for 

{code}
{
              "name": "some_name",
              "principal": {
                "value": "foobar/_HOST@${realm}",
                "type" : "service",
                "configurations": ["config1/property1", "config2/propertyA"],
                "local_username" : "${hadoop-env/hdfs_user}"
              },
              "keytab": {
                "file": "${keytab_dir}/foobar.service.keytab",
                "owner": {
                  "name": "${config-env/foobar_user}",
                  "access": "r"
                },
                "group": {
                  "name": "${cluster-env/user_group}",
                  "access": ""
                },
                "configurations":[ "config1/property2",  "config2/propertyB"]
              }
            },
{code}



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to