-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/47428/
-----------------------------------------------------------
Review request for Ambari and Robert Levas.
Bugs: AMBARI-16171
https://issues.apache.org/jira/browse/AMBARI-16171
Repository: ambari
Description
-------
The up-coming version of Phoenix will contain some new functionality to support
Kerberos authentication of clients via SPNEGO with the Phoenix Query Server
(PQS).
Presently, Ambari will configure PQS to use the hbase service keytab which will
result in the SPNEGO authentication failing as the RFC requires that the
"primary" component of the Kerberos principal for the server is "HTTP". Thus,
we need to ensure that we switch PQS over to use the spnego.service.keytab as
the keytab and "HTTP/_HOST@REALM" as the principal.
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java
1f3b1d3
ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json
c9536f8
ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java
f36e640
Diff: https://reviews.apache.org/r/47428/diff/
Testing
-------
Unit testing, still working through a "real" Ambari upgrade
Thanks,
Josh Elser
