----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/47428/ -----------------------------------------------------------
(Updated May 17, 2016, 7:58 p.m.) Review request for Ambari and Robert Levas. Bugs: AMBARI-16171 https://issues.apache.org/jira/browse/AMBARI-16171 Repository: ambari Description ------- The up-coming version of Phoenix will contain some new functionality to support Kerberos authentication of clients via SPNEGO with the Phoenix Query Server (PQS). Presently, Ambari will configure PQS to use the hbase service keytab which will result in the SPNEGO authentication failing as the RFC requires that the "primary" component of the Kerberos principal for the server is "HTTP". Thus, we need to ensure that we switch PQS over to use the spnego.service.keytab as the keytab and "HTTP/_HOST@REALM" as the principal. Diffs (updated) ----- ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java 1f3b1d3 ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json c9536f8 ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java f36e640 Diff: https://reviews.apache.org/r/47428/diff/ Testing ------- Unit testing, still working through a "real" Ambari upgrade Thanks, Josh Elser