[jira] [Resolved] (AMBARI-24335) Update service metainfo to declare Kerberos is required for SSO integration support

["Olivér Szabó (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-24335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Olivér Szabó resolved AMBARI-24335.
-----------------------------------
    Resolution: Fixed

> Update service metainfo to declare Kerberos is required for SSO integration support
> -----------------------------------------------------------------------------------
>
>                 Key: AMBARI-24335
>                 URL: https://issues.apache.org/jira/browse/AMBARI-24335
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.7.0
>            Reporter: Sandor Molnar
>            Assignee: Sandor Molnar
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 2.7.1
>
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> Update service metainfo to declare Kerberos is required for SSO integration support.
> The metainfo file allow for a service to indicate that is supports SSO integration.
> {code:java|title=Example}
>       <sso>
>         <supported>true</supported>
>         <enabledConfiguration>service-site/knox.sso.enabled</enabledConfiguration>
>       </sso>
> {code}
> However, some services required that Kerberos is enabled to support SSO. This needs to be indicated in the metainfo so that Ambari knows how to behave properly.
> {code:java|title=Example}
>       <sso>
>         <supported>true</supported>
>         <enabledConfiguration>service-site/knox.sso.enabled</enabledConfiguration>
>         <kerberosRequired>true</kerberosRequired>
>       </sso>
> {code}
> Along with this change, the following API request needs to be updated to supply the relevant data:
> {noformat:title=Get stack service details}
> GET /api/v1/stacks/:STACK_NAME/versions/:VERSION/services/:SERVICE_NAME",
> {
>   "href" : ":URL",
>   "StackServices" : {
>      ...
>      "sso_integration_supported": "true",
>      "sso_integration_requires_kerberos": "true",
>      ...
>   },
>   ...
> {noformat}
> {noformat:title=Get installed service information}
> GET /api/v1/clusters/:CLUSTER_NAME/services/:SERVICE_NAME
> {
>   "href" : ":URL",
>   "ServiceInfo" : {
>     "cluster_name" : ":CLUSTER_NAME",
>     ...
>     "sso_integration_supported": "true",
>     "sso_integration_requires_kerberos": "true",
>     "sso_integration_enabled": "false",
>     "sso_integration_desired": "false",
>      ...
>     },
>     ...
> {noformat}
> {noformat:title=List installed services that support SSO integration only when Kerberos to be enabled}
> GET /api/v1/clusters/:CLUSTER_NAME/services?ServiceInfo/sso_integration_supported=true&ServiceInfo/sso_integration_requires_kerberos=true
> {
>   "href" : ":URL",
>   "items" : [
>       ...
>    ]
> }
> {noformat}
> {noformat:title=List stack services that support SSO integration only when Kerberos is enabed}
> GET /api/v1/stacks/:STACK_NAME/versions/:VERSION/services?StackServices/sso_integration_supported=true&StackServices/sso_integration_requires_kerberos=true
> {
>   "href" : ":URL",
>   "items" : [
>       ...
>    ]
> }{noformat}



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)