-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/51822/
-----------------------------------------------------------
Review request for Ambari, Alejandro Fernandez, Jonathan Hurley, and Nate Cole.
Bugs: AMBARI-18365
https://issues.apache.org/jira/browse/AMBARI-18365
Repository: ambari
Description
-------
Add the followng Ambari configuration options to support Kerberos token
authentication
- `authentication.kerberos.enabled`
-- Determines whether to use Kerberos (SPNEGO) authentication when connecting
Ambari: {{true}} to enable this feature; {{false}}, otherwise
- `authentication.kerberos.spnego.principal`
-- The Kerberos principal name to use when verifying user-supplied Kerberos
tokens for authentication via SPNEGO
- `authentication.kerberos.spnego.keytab.file`
-- The Kerberos keytab file to use when verifying user-supplied Kerberos tokens
for authentication via SPNEGO
- `authentication.kerberos.user.types`
-- A comma-delimited (ordered) list of preferred user types to use when finding
the Ambari user account for the user-supplied Kerberos identity during
authentication via SPNEGO
- `authentication.kerberos.auth_to_local.rules`
-- The auth-to-local rules set to use when translating a user's principal name
to a local user name during authentication via SPNEGO.
NOTE: These properties are in the {{ambari.properties}} file since this feature
may be enabled whether the rest of the cluster has Kerberos enabled or not.
See https://issues.apache.org/jira/browse/AMBARI-18364 for an overview
requiring the need for this patch.
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/configuration/Configuration.java
ee73b8d
ambari-server/src/main/java/org/apache/ambari/server/security/authentication/kerberos/AmbariKerberosAuthenticationProperties.java
PRE-CREATION
ambari-server/src/test/java/org/apache/ambari/server/configuration/ConfigurationTest.java
f429a36
ambari-server/src/test/java/org/apache/ambari/server/security/authentication/kerberos/AmbariKerberosAuthenticationPropertiesTest.java
PRE-CREATION
Diff: https://reviews.apache.org/r/51822/diff/
Testing
-------
Manually tested...
# Local test results: PENDING
# Jenkins test results: PENDING
Thanks,
Robert Levas
