-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/49508/
-----------------------------------------------------------

(Updated July 1, 2016, 1:48 p.m.)


Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
Srimanth Gunturi, and Velmurugan Periasamy.


Bugs: AMBARI-17522
    https://issues.apache.org/jira/browse/AMBARI-17522


Repository: ambari


Description (updated)
-------

Problem:
Upgrade from 2.4 to 2.5 will not have rangerkms principal/keytab identity (as 
it is added in stack 2.5) to create/get repository in Ranger Service.
Ranger KMS service had spnego principal/keytab identity in 2.4.
Ranger KMS service is a dependent on Ranger Service. For previous stack all 
calls were using urllib2 authentication to create/get repository in Ranger 
Service in kerberos env. Ranger Service participate in kerberos from 2.5 
onwards so all call to create/get repository will be using curl --negotiate.

Solution:
If rangerkms principal/keytab is not available during upgrade, using spnego 
principal/keytab.


Diffs
-----

  
ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py
 133760b 
  
ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/params.py
 dce6576 

Diff: https://reviews.apache.org/r/49508/diff/


Testing
-------

Running tests for stack:2.5 service:RANGER_KMS
test_configure_default (test_kms_server.TestRangerKMS) ... 2016-07-01 
18:00:57,586 - Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf
ok
test_configure_secured (test_kms_server.TestRangerKMS) ... 2016-07-01 
18:00:57,607 - Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf
ok
test_start_default (test_kms_server.TestRangerKMS) ... 2016-07-01 18:00:57,630 
- Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf
2016-07-01 18:00:57,634 - Rangeradmin: Skip ranger admin if it's down !
ok
test_start_secured (test_kms_server.TestRangerKMS) ... 2016-07-01 18:00:57,661 
- Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf
2016-07-01 18:00:57,667 - RangeradminV2: Skip ranger admin if it's down !
2016-07-01 18:00:57,667 - KMS repository c1_kms exist
ok
test_stop_default (test_kms_server.TestRangerKMS) ... 2016-07-01 18:00:57,685 - 
Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf
ok

----------------------------------------------------------------------
Ran 5 tests in 0.135s

OK


Thanks,

Mugdha Varadkar

Reply via email to