----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/61168/#review181606 -----------------------------------------------------------
ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/FixAuthToLocalMappingAction.java Lines 36-37 (patched) <https://reviews.apache.org/r/61168/#comment257194> There may be lots of different auth-to-local rule sets. The main one is `core-site/hadoop.security.auth_to_local`. See `org.apache.ambari.server.state.kerberos.KerberosDescriptor#getAllAuthToLocalProperties` For example: - `kms-site/hadoop.kms.authentication.kerberos.name.rules` - `falcon-startup.properties/*.falcon.http.authentication.kerberos.name.rules` ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/FixAuthToLocalMappingAction.java Lines 83 (patched) <https://reviews.apache.org/r/61168/#comment257193> Technically there should be no HTTP rule in the auth_to_local rules. This is not really a user identitiy. - Robert Levas On July 27, 2017, 2:58 p.m., Sid Wagle wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/61168/ > ----------------------------------------------------------- > > (Updated July 27, 2017, 2:58 p.m.) > > > Review request for Ambari, Attila Doroszlai, Alejandro Fernandez, Jonathan > Hurley, Robert Levas, and Sumit Mohanty. > > > Bugs: AMBARI-21577 > https://issues.apache.org/jira/browse/AMBARI-21577 > > > Repository: ambari > > > Description > ------- > > Hive Service check is failing :- > > {code} > HTTP/[email protected] is not allowed to > impersonate ambari-qa > {code} > > Patch executes custom action to remove offending rules. > > > Diffs > ----- > > > ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/FixAuthToLocalMappingAction.java > PRE-CREATION > > ambari-server/src/main/resources/stacks/BigInsights/4.2.5/upgrades/nonrolling-upgrade-to-hdp-2.6.xml > 684acfa > > ambari-server/src/main/resources/stacks/BigInsights/4.2/upgrades/nonrolling-upgrade-to-hdp-2.6.xml > 484e459 > > ambari-server/src/test/java/org/apache/ambari/server/serveraction/upgrades/FixAuthToLocalMappingActionTest.java > PRE-CREATION > > > Diff: https://reviews.apache.org/r/61168/diff/2/ > > > Testing > ------- > > Pending manual test. > > > Thanks, > > Sid Wagle > >
