You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2016/01/14 02:12:39 UTC

[jira] [Commented] (AMBARI-14628) Create JAAS config for Atlas.

    [ https://issues.apache.org/jira/browse/AMBARI-14628?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15097396#comment-15097396 ] 

Hudson commented on AMBARI-14628:
---------------------------------

FAILURE: Integrated in Ambari-trunk-Commit #4167 (See [https://builds.apache.org/job/Ambari-trunk-Commit/4167/])
AMBARI-14628 - Create JAAS config for Atlas. (tbeerbower) (tbeerbower: [http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=7cacc4093285db5a7271df2d8939c767556fda46])
* ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/configuration/atlas-env.xml
* ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/package/scripts/params.py
* ambari-server/src/test/python/stacks/2.3/ATLAS/test_metadata_server.py
* ambari-server/src/test/python/stacks/2.3/configs/secure.json
* ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/package/scripts/metadata.py
* ambari-server/src/main/resources/common-services/ATLAS/0.1.0.2.3/package/templates/atlas_jaas.conf.j2


> Create JAAS config for Atlas.
> -----------------------------
>
>                 Key: AMBARI-14628
>                 URL: https://issues.apache.org/jira/browse/AMBARI-14628
>             Project: Ambari
>          Issue Type: Improvement
>            Reporter: Tom Beerbower
>            Assignee: Tom Beerbower
>         Attachments: AMBARI-14628.patch
>
>
> Ideally, Ambari would create the JAAS config for Atlas automatically when the cluster is Kerberized.
> When Atlas is configured with HBase as the storage backend in a secure cluster, a JAAS configuration file should be created and specified so that the HBase client can attempt to SASL-authenticate.
> Create Atlas JAAS configuration file (e.g. /etc/atlas/conf/atlas-jaas.conf).
> {code}
> 	Client {
> 	   com.sun.security.auth.module.Krb5LoginModule required
> 	   useKeyTab=true
> 	   useTicketCache=false
> 	   storeKey=true
> 	   doNotPrompt=false
> 	   keyTab="<atlas keytab>"
> 	   principal="<atlas principal>";
> 	};
> {code}
> Update Atlas METADATA_OPTS to include ‘java.security.auth.login.config’ set to the above Atlas JAAS configuration file.
> For example, {{-Djava.security.auth.login.config=/etc/atlas/conf/atlas-jaas.conf}}.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)