[
https://issues.apache.org/jira/browse/AMBARI-19079?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15898926#comment-15898926
]
wangyaoxin commented on AMBARI-19079:
-------------------------------------
Hi [~rlevas]
The OS is not LinuxONE, but its core is identical with Redhat’s/Centos’s,
therefore HDP and Ambari can run on PPC properly.
HDP needs repack on PPC. For instance,Hadoop code will import jar packages from
JDK; since IBM jar packages and Sun jar packages contain different content,
recompilation is required within IBM JDK.
It would be simple to edit configuration:only needs adding one configuration
into Kerberos. For example, jdk_type, sunor ibm, and –kt.
eg: hbase_master_jaas.conf.j2
{% if java_type == "sun" %}
Client {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
storeKey=true
useTicketCache=false
keyTab="{{master_keytab_path}}"
principal="{{master_jaas_princ}}";
};
{% endif %}
{% if java_type == "ibm" %}
Client {
com.ibm.security.auth.module.Krb5LoginModule required
useKeytab="{{master_keytab_path}}"
principal="{{master_jaas_princ}}"
credsType=both
debug=true;
};
{% endif %}
PPC JDK has two self-contained commands, klist and kinit. The usages of them
are indentical with the ones of Kerberos. eg: kinit -kt (I once mentioned it
must be kint -A -k -t, that was wrong, -kt is also allowed)
It has been completed before that deploying Ambari on PPC platform with
supporting Kerberos. If it is considered that supporting Ambari with kerberos
enabled on PPC platform, I will attach the patch afterwards. My pleasure to
discuss subjects on Kerberos with you, thanks for your patience andtime!
> The kerberos -kt should be free configuration
> ---------------------------------------------
>
> Key: AMBARI-19079
> URL: https://issues.apache.org/jira/browse/AMBARI-19079
> Project: Ambari
> Issue Type: Improvement
> Reporter: wangyaoxin
> Assignee: wangyaoxin
> Fix For: trunk
>
>
> If JDK is not SUN, such as IBM JDK, then must initialize it with JDK tool
> Kinit ({jdk_home}/jre/bin/kinit -A -k -t); therefore I sense it would be
> better to add two configurations item in kerberos-env for kt and java type,
> for example, cmd_type and java_type .
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
