----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/45972/#review128131 -----------------------------------------------------------
ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py (line 503) <https://reviews.apache.org/r/45972/#comment191503> Will this _always_ be a headless principal? If not, maybe rename and also attempt to change `_HOST` to the current FQDN. ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/kerberos.json (lines 42 - 62) <https://reviews.apache.org/r/45972/#comment191505> Possibly change this to: ` { "name": "/HIVE/HIVE_SEVER/hive_server_hive", "principal": { "configuration": "hive-site/hive.metastore.kerberos.principal" }, "keytab": { "configuration": "hive-site/hive.metastore.kerberos.keytab.file" } } ` ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json (line 81) <https://reviews.apache.org/r/45972/#comment191504> This value must include the cluster's name like other _headless_ principals. This is to help avoid name collisions when multiple Ambari clusters share the same KDC or AD. Example: `hive-${cluster-name}@${realm}` Also, hard-coding `hive` here is probably not a good idea. Maybe use `${hive-env/hive-user}` - Robert Levas On April 11, 2016, 1:56 a.m., Swapan Shridhar wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/45972/ > ----------------------------------------------------------- > > (Updated April 11, 2016, 1:56 a.m.) > > > Review request for Ambari, Alejandro Fernandez, Jaimin Jetly, Robert Levas, > and Sumit Mohanty. > > > Bugs: AMBARI-15785 > https://issues.apache.org/jira/browse/AMBARI-15785 > > > Repository: ambari > > > Description > ------- > > HiveServerInteractive. Kerberos Support. > > - Needs to have hive keytabs on all nodemanagers. > - Hive Server Interactive needs same keytabs as HiveServer and Metastore. > > > Diffs > ----- > > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/hive_server_interactive.py > 055296b > > ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py > c7d57c0 > > ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/configuration/hive-interactive-site.xml > 5830a52 > ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/kerberos.json > PRE-CREATION > ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json > PRE-CREATION > ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py > a3009ee > > Diff: https://reviews.apache.org/r/45972/diff/ > > > Testing > ------- > > - Partially done. > - Python UT : PASSES. > > > Thanks, > > Swapan Shridhar > >
