[
https://issues.apache.org/jira/browse/AMBARI-22583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16280430#comment-16280430
]
Robert Levas commented on AMBARI-22583:
---------------------------------------
[~adoroszlai], Thanks for catching this. I thought that I ran the unit tests,
hmm. Sorry about that.
I will do a quick fix in an amended patch.
> Ambari should not force accounts created in IPA to be added a user named
> 'ambari-managed-principals'
> ----------------------------------------------------------------------------------------------------
>
> Key: AMBARI-22583
> URL: https://issues.apache.org/jira/browse/AMBARI-22583
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 3.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Labels: freeipa, kerberos
> Fix For: 3.0.0
>
> Attachments: AMBARI-22583_trunk_01.patch
>
>
> When creating user principals while enabling Kerberos using FreeIPA, Ambari
> should not force accounts to be added a user named
> 'ambari-managed-principals'.
> This occurs because the default value of {{kerberos-env/ipa_user_group}} is
> "ambari-managed-principals". To stop forcing this, the default value should
> be empty.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
