> On Aug. 22, 2017, 5:55 a.m., Sebastian Toader wrote: > > ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.2.5/kerberos.json > > Lines 46-47 (original) > > <https://reviews.apache.org/r/61803/diff/1/?file=1801237#file1801237line46> > > > > Aren't these needed any more?
These were never needed - they are incorrect. The format is `hadoop.proxyuser.<local/translated username>.groups`, not `hadoop.proxyuser.<principal name>.groups`. > On Aug. 22, 2017, 5:55 a.m., Sebastian Toader wrote: > > ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.3.0/kerberos.json > > Lines 46-47 (original) > > <https://reviews.apache.org/r/61803/diff/1/?file=1801238#file1801238line46> > > > > Aren't these needed any more? These were never needed - they are incorrect. The format is `hadoop.proxyuser.<local/translated username>.groups`, not `hadoop.proxyuser.<principal name>.groups`. > On Aug. 22, 2017, 5:55 a.m., Sebastian Toader wrote: > > ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json > > Lines 46-47 (original) > > <https://reviews.apache.org/r/61803/diff/1/?file=1801239#file1801239line46> > > > > Aren't these needed any more? These were never needed - they are incorrect. The format is `hadoop.proxyuser.<local/translated username>.groups`, not `hadoop.proxyuser.<principal name>.groups`. > On Aug. 22, 2017, 5:55 a.m., Sebastian Toader wrote: > > ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json > > Lines 46-47 (original) > > <https://reviews.apache.org/r/61803/diff/1/?file=1801240#file1801240line46> > > > > Aren't these needed any more? These were never needed - they are incorrect. The format is `hadoop.proxyuser.<local/translated username>.groups`, not `hadoop.proxyuser.<principal name>.groups`. - Robert ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/61803/#review183455 ----------------------------------------------------------- On Aug. 21, 2017, 5:36 p.m., Robert Levas wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/61803/ > ----------------------------------------------------------- > > (Updated Aug. 21, 2017, 5:36 p.m.) > > > Review request for Ambari, Balázs Bence Sári, Eugene Chekanskiy, Jonathan > Hurley, Laszlo Puskas, Prabhjyot Singh, and Sebastian Toader. > > > Bugs: AMBARI-21772 > https://issues.apache.org/jira/browse/AMBARI-21772 > > > Repository: ambari > > > Description > ------- > > The configurations `core-site/hadoop.proxyuser.zeppelin.hosts` and > `core-site/hadoop.proxyuser.zeppelin.groups`, which are required to allow > zeppelin user to proxy other users in order to support impersonation features > of few of the zeppelin interpreters, was not added during the upgrade from > Ambari 2.4.2 to Ambari 2.5.2. Impersonation support for Zeppelin was added in > AMBARI-20094. > > > Diffs > ----- > > > ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog252.java > 1192c112f8 > > ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.2.5/kerberos.json > 925215b8c5 > > ambari-server/src/main/resources/common-services/ZEPPELIN/0.6.0.3.0/kerberos.json > 925215b8c5 > > ambari-server/src/main/resources/stacks/HDP/2.5/services/ZEPPELIN/kerberos.json > 925215b8c5 > > ambari-server/src/main/resources/stacks/HDP/2.6/services/ZEPPELIN/kerberos.json > 925215b8c5 > > ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog252Test.java > d7df68c122 > > > Diff: https://reviews.apache.org/r/61803/diff/1/ > > > Testing > ------- > > Manually tested various scenarios > > # Local test results: PENDING > > # Jenkins test results: PENDING > > > Thanks, > > Robert Levas > >
