-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/49665/
-----------------------------------------------------------

Review request for Ambari, Alejandro Fernandez, Srimanth Gunturi, Tim Thorpe, 
and Vitalyi Brodetskyi.


Bugs: AMBARI-17479
    https://issues.apache.org/jira/browse/AMBARI-17479


Repository: ambari


Description
-------

The `kafka-broker/authorizer.class.name` property is not being set properly 
when Kerberos is enabled.

The following logic should be followed:
```
if Kerberos is enabled
  if ranger-kafka-plugin-properties/ranger-kafka-plugin-enabled == yes
    set authorizer.class.name to 
"org.apache.ranger.authorization.kafka.authorizer.RangerKafkaAuthorizer"
  else
    set authorizer.class.name to "kafka.security.auth.SimpleAclAuthorizer"
else
  remove authorizer.class.name
```

This should be updated in the stack advisor code. 

While at it, configurations from Kafka's `kerberos.json` file should be moved 
to the stack advisor to help ensure properties are set in the the same place to 
help with code maintenance and consistency.


Diffs
-----

  ambari-server/src/main/resources/stacks/HDP/2.0.6/services/stack_advisor.py 
06f7cfe 
  ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py 
879008b 
  ambari-server/src/test/python/stacks/2.3/common/test_stack_advisor.py 2944f6f 

Diff: https://reviews.apache.org/r/49665/diff/


Testing
-------

Manually tested

#Jenkins test results: PENDING


Thanks,

Robert Levas

Reply via email to