[
https://issues.apache.org/jira/browse/AMBARI-21919?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16175141#comment-16175141
]
Hudson commented on AMBARI-21919:
---------------------------------
FAILURE: Integrated in Jenkins build Ambari-branch-2.6 #266 (See
[https://builds.apache.org/job/Ambari-branch-2.6/266/])
AMBARI-21919. Kerberos identity references should use the "reference" (rlevas:
[http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=30a046adb2e3e62a8f18abe4d00af91441a4cd64])
* (edit)
ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog260Test.java
* (edit)
ambari-server/src/main/resources/common-services/KAFKA/0.10.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/SOLR/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/kerberos.json
* (edit)
ambari-server/src/main/java/org/apache/ambari/server/state/kerberos/AbstractKerberosDescriptorContainer.java
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/KAFKA/kerberos.json
* (edit) ambari-server/src/main/resources/kerberos_descriptor_schema.json
* (edit)
ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/STORM/0.9.1/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/TEZ/0.4.0.2.1/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/ECS/kerberos.json
* (edit)
contrib/management-packs/odpi-ambari-mpack/src/main/resources/stacks/ODPi/2.0/services/HIVE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.3/services/TEZ/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/SOLR/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/OOZIE/4.2.0.2.3/kerberos.json
* (edit)
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog260.java
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER_KMS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/GRUMPY/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/KNOX/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/AMBARI_METRICS/0.1.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/HDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/RANGER_KMS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/PIG/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/ZEPPELIN/0.7.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEHBASE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/OOZIE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/DRUID/kerberos.json
* (edit)
ambari-server/src/test/resources/stacks/HDP/2.0.8/services/HDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/ATLAS/0.7.0.2.5/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/HIVE/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/TITAN/1.0.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/SPARK/kerberos.json
* (edit)
contrib/management-packs/microsoft-r_mpack/src/main/resources/common-services/MICROSOFT_R_SERVER/8.0.5/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/SPARK2/2.0.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEYARN/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/SPARK/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/HBASE/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/LOGSEARCH/0.5.0/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/AMBARI_INFRA/0.1.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KERBEROS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/HBASE/kerberos.json
* (edit)
ambari-funtest/src/test/resources/stacks/HDP/2.0.8/services/HDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/OOZIE/4.0.0.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/RANGER_KMS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/AMBARI_METRICS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEZOOKEEPER/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/KAFKA/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/ATLAS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/HAPPY/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/SOLR/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/SNOW/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/HBASE/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/MAHOUT/1.0.0.2.3/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/SPARK/1.4.1/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/ZOOKEEPER/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/SPARK2/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/HDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/HBASE/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/ACCUMULO/1.6.1.2.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/SUPERSET/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/SPARK/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.3/services/ACCUMULO/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/SLEEPY/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/HIVE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/PIG/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.2/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEHDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.3.GlusterFS/services/ACCUMULO/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/HBASE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/TITAN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/OOZIE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/ZOOKEEPER/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/KERBEROS/kerberos.json
* (edit)
contrib/management-packs/odpi-ambari-mpack/src/main/resources/stacks/ODPi/2.0/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/STORM/1.1.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/SLIDER/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/KAFKA/0.9.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/SPARK/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/SPARK/1.2.1/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.3/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/java/org/apache/ambari/server/state/kerberos/KerberosDescriptor.java
* (edit)
ambari-server/src/main/resources/common-services/PIG/0.12.0.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/FALCON/0.5.0.2.1/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json
* (edit)
ambari-server/src/test/resources/kerberos/test_kerberos_descriptor_ranger_kms.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/KNOX/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/JNBG/0.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/FALCON/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/HAWQ/2.0.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/KAFKA/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/HDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.0/services/OOZIE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2.5/services/HDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/SLIDER/0.60.0.2.2/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/BigInsights/4.2/services/HIVE/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.3.ECS/services/YARN/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.5/services/HDFS/kerberos.json
* (edit)
ambari-server/src/main/resources/stacks/HDP/2.6/services/SPARK/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/ZOOKEEPER/3.4.5/kerberos.json
* (edit)
ambari-server/src/main/resources/common-services/STORM/1.0.1/kerberos.json
> Kerberos identity references should use the "reference" attribute
> -----------------------------------------------------------------
>
> Key: AMBARI-21919
> URL: https://issues.apache.org/jira/browse/AMBARI-21919
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.4.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Labels: kerberos_descriptor
> Fix For: 2.6.0
>
> Attachments: AMBARI-21919_branch-2.6_01.patch,
> AMBARI-21919_branch-2.6_02.patch, AMBARI-21919_trunk_01.patch,
> AMBARI-21919_trunk_02.patch
>
>
> Kerberos identity references should use the "reference" attribute rather than
> rely on the "name" attribute to indicate the identity descriptor references
> some other identity descriptor.
> Either method should work on the backend, however the UI appears to not fully
> handle the "named" reference properly.
> The solution is to change
> {code}
> {
> "name": "/HDFS/NAMENODE/namenode_nn",
> "principal": {
> "configuration":
> "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.principal"
> },
> "keytab": {
> "configuration":
> "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.keyTab"
> }
> }
> {code}
> by changing the "name" attribute to "reference" and adding a new "name"
> reference with a unique name relative to the scope of the identity
> descriptor. For example:
> {code}
> {
> "name":"ranger_hdfs_audit"
> "reference": "/HDFS/NAMENODE/namenode_nn",
> "principal": {
> "configuration":
> "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.principal"
> },
> "keytab": {
> "configuration":
> "ranger-hdfs-audit/xasecure.audit.jaas.Client.option.keyTab"
> }
> }
> {code}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
