----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/49508/#review140354 -----------------------------------------------------------
Ship it! Ship It! - Robert Levas On July 1, 2016, 9:48 a.m., Mugdha Varadkar wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/49508/ > ----------------------------------------------------------- > > (Updated July 1, 2016, 9:48 a.m.) > > > Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, > Srimanth Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17522 > https://issues.apache.org/jira/browse/AMBARI-17522 > > > Repository: ambari > > > Description > ------- > > Problem: > Upgrade from 2.4 to 2.5 will not have rangerkms principal/keytab identity (as > it is added in stack 2.5) to create/get repository in Ranger Service. > Ranger KMS service had spnego principal/keytab identity in 2.4. > Ranger KMS service is a dependent on Ranger Service. For previous stack all > calls were using urllib2 authentication to create/get repository in Ranger > Service in kerberos env. Ranger Service participate in kerberos from 2.5 > onwards so all call to create/get repository will be using curl --negotiate. > > Solution: > If rangerkms principal/keytab is not available during upgrade, using spnego > principal/keytab. > > > Diffs > ----- > > > ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py > 133760b > > ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/params.py > dce6576 > > Diff: https://reviews.apache.org/r/49508/diff/ > > > Testing > ------- > > Running tests for stack:2.5 service:RANGER_KMS > test_configure_default (test_kms_server.TestRangerKMS) ... 2016-07-01 > 18:00:57,586 - Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf > ok > test_configure_secured (test_kms_server.TestRangerKMS) ... 2016-07-01 > 18:00:57,607 - Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf > ok > test_start_default (test_kms_server.TestRangerKMS) ... 2016-07-01 > 18:00:57,630 - Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf > 2016-07-01 18:00:57,634 - Rangeradmin: Skip ranger admin if it's down ! > ok > test_start_secured (test_kms_server.TestRangerKMS) ... 2016-07-01 > 18:00:57,661 - Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf > 2016-07-01 18:00:57,667 - RangeradminV2: Skip ranger admin if it's down ! > 2016-07-01 18:00:57,667 - KMS repository c1_kms exist > ok > test_stop_default (test_kms_server.TestRangerKMS) ... 2016-07-01 18:00:57,685 > - Using hadoop conf dir: /usr/hdp/current/hadoop-client/conf > ok > > ---------------------------------------------------------------------- > Ran 5 tests in 0.135s > > OK > > > Thanks, > > Mugdha Varadkar > >
