-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45972/#review128131
-----------------------------------------------------------




ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py
 (line 503)
<https://reviews.apache.org/r/45972/#comment191503>

    Will this _always_ be a headless principal?  If not, maybe rename and also 
attempt to change `_HOST` to the current FQDN.



ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/kerberos.json 
(lines 42 - 62)
<https://reviews.apache.org/r/45972/#comment191505>

    Possibly change this to:
    
    `
    {
      "name": "/HIVE/HIVE_SEVER/hive_server_hive",
      "principal": {
        "configuration": "hive-site/hive.metastore.kerberos.principal"
      },
      "keytab": {
        "configuration": "hive-site/hive.metastore.kerberos.keytab.file"
      }
    }
    `



ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json 
(line 81)
<https://reviews.apache.org/r/45972/#comment191504>

    This value must include the cluster's name like other _headless_ 
principals.  This is to help avoid name collisions when multiple Ambari 
clusters share the same KDC or AD.
    
    Example:  `hive-${cluster-name}@${realm}`
    
    Also, hard-coding `hive` here is probably not a good idea.  Maybe use 
`${hive-env/hive-user}`


- Robert Levas


On April 11, 2016, 1:56 a.m., Swapan Shridhar wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/45972/
> -----------------------------------------------------------
> 
> (Updated April 11, 2016, 1:56 a.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Jaimin Jetly, Robert Levas, 
> and Sumit Mohanty.
> 
> 
> Bugs: AMBARI-15785
>     https://issues.apache.org/jira/browse/AMBARI-15785
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> HiveServerInteractive. Kerberos Support. 
> 
> - Needs to have hive keytabs on all nodemanagers.
> - Hive Server Interactive needs same keytabs as HiveServer and Metastore.
> 
> 
> Diffs
> -----
> 
>   
> ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/hive_server_interactive.py
>  055296b 
>   
> ambari-server/src/main/resources/common-services/HIVE/0.12.0.2.0/package/scripts/params_linux.py
>  c7d57c0 
>   
> ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/configuration/hive-interactive-site.xml
>  5830a52 
>   ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/kerberos.json 
> PRE-CREATION 
>   ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json 
> PRE-CREATION 
>   ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py 
> a3009ee 
> 
> Diff: https://reviews.apache.org/r/45972/diff/
> 
> 
> Testing
> -------
> 
> - Partially done.
> - Python UT : PASSES.
> 
> 
> Thanks,
> 
> Swapan Shridhar
> 
>

Reply via email to