[ https://issues.apache.org/jira/browse/AMBARI-22583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16280566#comment-16280566 ]
Robert Levas commented on AMBARI-22583: --------------------------------------- Locally, applying [^AMBARI-22583_trunk_01_amend_01.patch] resulted in {noformat} [INFO] ------------------------------------------------------------------------ [INFO] BUILD SUCCESS [INFO] ------------------------------------------------------------------------ [INFO] Total time: 28:58 min [INFO] Finished at: 2017-12-06T12:05:49-05:00 [INFO] Final Memory: 98M/1986M [INFO] ------------------------------------------------------------------------ {noformat} > Ambari should not force accounts created in IPA to be added a user named > 'ambari-managed-principals' > ---------------------------------------------------------------------------------------------------- > > Key: AMBARI-22583 > URL: https://issues.apache.org/jira/browse/AMBARI-22583 > Project: Ambari > Issue Type: Bug > Components: ambari-server > Affects Versions: 3.0.0 > Reporter: Robert Levas > Assignee: Robert Levas > Labels: freeipa, kerberos > Fix For: 3.0.0 > > Attachments: AMBARI-22583_trunk_01.patch, > AMBARI-22583_trunk_01_amend_01.patch > > > When creating user principals while enabling Kerberos using FreeIPA, Ambari > should not force accounts to be added a user named > 'ambari-managed-principals'. > This occurs because the default value of {{kerberos-env/ipa_user_group}} is > "ambari-managed-principals". To stop forcing this, the default value should > be empty. -- This message was sent by Atlassian JIRA (v6.4.14#64029)