[ 
https://issues.apache.org/jira/browse/AMBARI-18898?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15670334#comment-15670334
 ] 

Hudson commented on AMBARI-18898:
---------------------------------

FAILURE: Integrated in Jenkins build Ambari-branch-2.5 #336 (See 
[https://builds.apache.org/job/Ambari-branch-2.5/336/])
AMBARI-18898. Multiple kerberos name rules can not be set up for Ambari 
(oleewere: 
[http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=72953633b5589659e4127974c5dc54afc9674e01])
* (edit) 
ambari-server/src/main/resources/common-services/AMBARI_INFRA/0.1.0/properties/infra-solr-env.sh.j2
* (edit) 
ambari-server/src/main/resources/common-services/AMBARI_INFRA/0.1.0/package/scripts/params.py
* (add) ambari-logsearch/ambari-logsearch-assembly/src/main/resources/solr
* (edit) ambari-logsearch/ambari-logsearch-assembly/pom.xml


> Multiple kerberos name rules can not be set up for Ambari Infra Solr
> --------------------------------------------------------------------
>
>                 Key: AMBARI-18898
>                 URL: https://issues.apache.org/jira/browse/AMBARI-18898
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-logsearch
>    Affects Versions: 2.4.0
>            Reporter: Miklos Gergely
>            Assignee: Miklos Gergely
>            Priority: Critical
>             Fix For: 2.5.0
>
>         Attachments: AMBARI-18898.patch
>
>
> If multiple rules are entered into the proprety
> Advanced infra-solr-env / Infra Solr Kerberos name rules
> There are multiple issues here:
> 1. The rules should be escaped, the $ characters in them should be handled, 
> so that the expressions in the rules like $0, $1 are not replaced with the 
> script directory, and the script file name. Currently the user must do this 
> in the value entered, which is not even documented.
> 2. The variable SOLR_KERB_NAME_RULES in infra-solr-env.sh should have quotes 
> around it's value, so that the whole string is assigned to it, not only the 
> first rule.
> 3. SOLR_KERB_NAME_RULES can not be the part of SOLR_AUTHENTICATION_OPTS, 
> because it is handled incorrectly, if an expression like -Dname="value1 
> value2" is passed to the jvm from a bash variable. Therefore 
> /usr/lib/ambari-infra-solr/bin/solr should be updated, and 
> -Dsolr.kerberos.name.rules="$SOLR_KERB_NAME_RULES" should be added directly 
> into the command script.
> Options



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to