Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Sumit Mohanty]

> On July 23, 2016, 2:34 p.m., Sumit Mohanty wrote:
> > ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml,
> >  line 72
> > 
> >
> > In that case should it be in 
> > HDP/2.5/services/RANGER/configurations/ranger-admin-site.xml?

You can ignore. Reaized that starting HDP-2.5, it extends RANGER 0.6.0


- Sumit


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143315
---


On July 22, 2016, 2:52 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 2:52 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Sumit Mohanty]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143315
---




ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
 (line 72)


In that case should it be in 
HDP/2.5/services/RANGER/configurations/ranger-admin-site.xml?


- Sumit Mohanty


On July 22, 2016, 2:52 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 2:52 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Mugdha Varadkar]

> On July 22, 2016, 5:54 p.m., Alejandro Fernandez wrote:
> > ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml,
> >  line 72
> > 
> >
> > What should happen to existing clusters with Ranger that are Kerberized?

This is new property in stack 2.5


- Mugdha


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143245
---


On July 22, 2016, 2:52 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 2:52 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Alejandro Fernandez]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143245
---




ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
 (line 72)


What should happen to existing clusters with Ranger that are Kerberized?


- Alejandro Fernandez


On July 22, 2016, 2:52 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 2:52 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Gautam Borad]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143232
---


Ship it!




Ship It!

- Gautam Borad


On July 22, 2016, 2:52 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 2:52 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Mugdha Varadkar]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/
---

(Updated July 22, 2016, 2:52 p.m.)


Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.


Changes
---

Rolling back to first version of diff


Bugs: AMBARI-17854
https://issues.apache.org/jira/browse/AMBARI-17854


Repository: ambari


Description
---

Setting default value for ranger.spnego.kerberos.principal as *
Use only /spengo keytab under 
ranger-admin-site.xml/ranger.spnego.kerberos.keytab


Diffs (updated)
-

  
ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
 477df7a 
  ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
94c681d 

Diff: https://reviews.apache.org/r/50337/diff/


Testing
---

Tested Ranger installation in kerberos env


Thanks,

Mugdha Varadkar

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Mugdha Varadkar]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/
---

(Updated July 22, 2016, 2:18 p.m.)


Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.


Bugs: AMBARI-17854
https://issues.apache.org/jira/browse/AMBARI-17854


Repository: ambari


Description
---

Setting default value for ranger.spnego.kerberos.principal as *
Use only /spengo keytab under 
ranger-admin-site.xml/ranger.spnego.kerberos.keytab


Diffs (updated)
-

  
ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py
 3ec4b53 
  
ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py
 0bc330f 
  
ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/templates/ranger_solr_jaas_conf.j2
 PRE-CREATION 
  
ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/templates/ranger_solr_jass_conf.j2
 a456688 
  
ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
 477df7a 
  ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
94c681d 
  ambari-server/src/test/python/stacks/2.5/RANGER/test_ranger_admin.py 2345b8e 

Diff: https://reviews.apache.org/r/50337/diff/


Testing
---

Tested Ranger installation in kerberos env


Thanks,

Mugdha Varadkar

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Robert Levas]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143226
---


Ship it!




Ship It!

- Robert Levas


On July 22, 2016, 9:31 a.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 9:31 a.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Mugdha Varadkar]

> On July 22, 2016, 1:07 p.m., Robert Levas wrote:
> > ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml,
> >  line 72
> > 
> >
> > Why is this *?
> > 
> > I assume it will be replaced when Kerberos is enabled to some more 
> > approproate value. However if * is left, it will break the principal 
> > creation process since it is in a valid principal name.

@Robert, We have removed,

"principal": {
"configuration": 
"ranger-admin-site/ranger.spnego.kerberos.principal"
  }

from kerberos.json. This property will not be shown under Admin >> Kerberos >> 
Advanced Tab.

Just want spnego keytab value in the ranger.spnego.kerberos.keytab


- Mugdha


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143221
---


On July 22, 2016, 1:31 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 1:31 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Selvamohan Neethiraj, Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 50337: AMBARI-17854 Config changes for Ranger HA in kerberos env

[Robert Levas]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/50337/#review143221
---




ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
 (line 72)


Why is this *?

I assume it will be replaced when Kerberos is enabled to some more 
approproate value. However if * is left, it will break the principal creation 
process since it is in a valid principal name.


- Robert Levas


On July 22, 2016, 9:03 a.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/50337/
> ---
> 
> (Updated July 22, 2016, 9:03 a.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Robert Levas, 
> Srimanth Gunturi, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-17854
> https://issues.apache.org/jira/browse/AMBARI-17854
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Setting default value for ranger.spnego.kerberos.principal as *
> Use only /spengo keytab under 
> ranger-admin-site.xml/ranger.spnego.kerberos.keytab
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml
>  477df7a 
>   ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json 
> 94c681d 
> 
> Diff: https://reviews.apache.org/r/50337/diff/
> 
> 
> Testing
> ---
> 
> Tested Ranger installation in kerberos env
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>