[
https://issues.apache.org/jira/browse/AMBARI-22583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16280574#comment-16280574
]
Robert Levas commented on AMBARI-22583:
---------------------------------------
I wound up reverting the original patch then committing the combination of the
original patch and the amendment.
Committed to trunk
{noformat}
commit 814f5b456814ca278a02c06b5df3eba009c5caca
Author: Robert Levas <[email protected]>
Date: Wed Dec 6 12:49:01 2017 -0500
{noformat}
> Ambari should not force accounts created in IPA to be added a user named
> 'ambari-managed-principals'
> ----------------------------------------------------------------------------------------------------
>
> Key: AMBARI-22583
> URL: https://issues.apache.org/jira/browse/AMBARI-22583
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 3.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Labels: freeipa, kerberos
> Fix For: 3.0.0
>
> Attachments: AMBARI-22583_trunk_01.patch,
> AMBARI-22583_trunk_01_amend_01.patch
>
>
> When creating user principals while enabling Kerberos using FreeIPA, Ambari
> should not force accounts to be added a user named
> 'ambari-managed-principals'.
> This occurs because the default value of {{kerberos-env/ipa_user_group}} is
> "ambari-managed-principals". To stop forcing this, the default value should
> be empty.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)