-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/63698/
-----------------------------------------------------------
(Updated Nov. 13, 2017, 3:03 p.m.)
Review request for Ambari, Attila Magyar, Dmitro Lisnichenko, and Robert Levas.
Bugs: AMBARI-22390
https://issues.apache.org/jira/browse/AMBARI-22390
Repository: ambari
Description
-------
Now it is possible to put mulitple different principals to same keytab:
* copy keytap entry from existant identity:
1. define principal with new unique name(identity1) and reference to principal
that you want to update(identity0)
2. redefine principal record of identity
3. Good luck, now principals from identity1 and identity0 will be located in
keytab file from identity0
* just define new keytab entry in identity with same keytab file. If owners are
different for same keytab in different identities warning will be printed, if
owners and goups are different, or group does not have "r" permission for file,
error will be printed, so make sure that users that need this keytab are in
group that can access it
Diffs (updated)
-----
ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java
f91383117f
ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/AbstractPrepareKerberosServerAction.java
1dc8ca8ec7
ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/CreatePrincipalsServerAction.java
59d532753d
ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/KerberosServerAction.java
3491f18931
ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/stageutils/ResolvedKerberosKeytab.java
f66d273665
Diff: https://reviews.apache.org/r/63698/diff/3/
Changes: https://reviews.apache.org/r/63698/diff/2-3/
Testing
-------
mvn clean test, cluster deploy
Thanks,
Eugene Chekanskiy
