[jira] [Updated] (AMBARI-22138) When regenerating keytab files for a service, non-service-specific principals are affected

Sun, 08 Oct 2017 04:34:34 -0700 

     [ 
https://issues.apache.org/jira/browse/AMBARI-22138?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Levas updated AMBARI-22138:
----------------------------------
    Attachment: AMBARI-22138_trunk_01.patch

> When regenerating keytab files for a service, non-service-specific principals 
> are affected
> ------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-22138
>                 URL: https://issues.apache.org/jira/browse/AMBARI-22138
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.6.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>            Priority: Critical
>              Labels: kerberos
>             Fix For: 3.0.0
>
>         Attachments: AMBARI-22138_trunk_01.patch
>
>
> When regenerating keytab files for a service, non-service-specific principals 
> are affected. For example, when regenerating the keytab files for HDFS using 
> the following ReST API call:
> {code:title=PUT 
> /api/v1/clusters/c1?regenerate_keytabs=all&regenerate_components=HDFS}
> {
>   "Clusters": {
>     "security_type": "KERBEROS"
>   }
> }
> {code}
> The following principals are affected:
> * HTTP/[email protected]
> * [email protected]
> * nn/[email protected]
> * [email protected]
> * HTTP/[email protected]
> * dn/[email protected]
> * HTTP/[email protected]
> * nn/[email protected]
> * [email protected]
> However only the following principals *should be*  affected:
> * nn/[email protected]
> * [email protected]
> * dn/[email protected]
> * nn/[email protected]



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Reply via email to