-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/57350/
-----------------------------------------------------------
Review request for Ambari, Attila Magyar, Balázs Bence Sári, Eugene Chekanskiy,
Laszlo Puskas, Mugdha Varadkar, and Sebastian Toader.
Bugs: AMBARI-20335
https://issues.apache.org/jira/browse/AMBARI-20335
Repository: ambari
Description
-------
>From stack 2.5 onwards
>`xasecure.audit.jaas.Client.option.principal/ranger-hbase-audit` needs to have
>principal value available under `hbase.master.kerberos.principal/hbase-site`
To achieve that added below block of code under hbase
[kerberos.json|https://github.com/apache/ambari/blob/branch-2.5/ambari-server/src/main/resources/stacks/HDP/2.5/services/HBASE/kerberos.json]
```
{
"name": "/HBASE/HBASE_MASTER/hbase_master_hbase",
"principal": {
"configuration":
"ranger-hbase-audit/xasecure.audit.jaas.Client.option.principal"
},
"keytab": {
"configuration":
"ranger-hbase-audit/xasecure.audit.jaas.Client.option.keyTab"
}
}
```
But on test cluster,
`xasecure.audit.jaas.Client.option.principal/ranger-hbase-audit` property is
not showing the expected value. It is showing the principal/keytab values of
`ams_hbase_master_hbase` identity.
Because of wrong reference of principal audit to solr is not working in
kerberos environment, as security.json have below entry instead of
`[email protected]`
```
"[email protected]":[
"ranger_audit_user",
"dev"]
```
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog250.java
141e9cd
ambari-server/src/main/resources/stacks/HDP/2.5/services/HBASE/kerberos.json
f510770
ambari-server/src/main/resources/stacks/PERF/1.0/services/FAKEHBASE/kerberos.json
b053779
ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog250Test.java
2a59ccc
ambari-server/src/test/resources/kerberos/test_kerberos_descriptor_2_5_infra_solr.json
0c2723e
Diff: https://reviews.apache.org/r/57350/diff/1/
Testing
-------
Manually tested in Ambari 2.5.0 cluster and upgrade from Ambari 2.4.2.
# Local test results:
```
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 23:53.766s
[INFO] Finished at: Mon Mar 06 16:55:35 EST 2017
[INFO] Final Memory: 71M/772M
[INFO] ------------------------------------------------------------------------
```
# Jenkins test results: PENDING
Thanks,
Robert Levas
