You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@ambari.apache.org by Mugdha Varadkar <mu...@freestoneinfotech.com> on 2016/04/22 15:36:21 UTC
Review Request 46568: AMBARI-13349 Create a keytab for Ranger Service
for performing Name Lookup to Components
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/46568/
-----------------------------------------------------------
Review request for Ambari, Alejandro Fernandez, Gautam Borad, Jaimin Jetly, Jonathan Hurley, Jayush Luniya, Robert Levas, and Velmurugan Periasamy.
Bugs: AMBARI-13349
https://issues.apache.org/jira/browse/AMBARI-13349
Repository: ambari
Description
-------
Add kerberos support to RANGER service for stack 2.5 onwards
Changes includes:
1) Create keytabs and principals for RANGER_ADMIN, RANGER_USERSYNC and RANGER_TAGSYNC component.
2) Adding new alerts.json file for stack 2.5 which will use kerberos principal and keytab for web type alert.
Diffs
-----
ambari-common/src/main/python/resource_management/libraries/functions/constants.py 36df2e8
ambari-common/src/main/python/resource_management/libraries/functions/stack_features.py 2e9123f
ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/alerts/alert_ranger_admin_passwd_check.py ad95980
ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py 175115d
ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py 9f31983
ambari-server/src/main/resources/stacks/HDP/2.0.6/properties/stack_features.json f4bd028
ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/alerts.json PRE-CREATION
ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-admin-site.xml d533dbc
ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-tagsync-site.xml 9ffc59f
ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-ugsync-site.xml PRE-CREATION
ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/kerberos.json PRE-CREATION
Diff: https://reviews.apache.org/r/46568/diff/
Testing
-------
Tested Ranger service with kerberos enabled for stack 2.5
Thanks,
Mugdha Varadkar
Re: Review Request 46568: AMBARI-13349 Create a keytab for Ranger
Service for performing Name Lookup to Components
Posted by Jayush Luniya <jl...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/46568/#review130168
-----------------------------------------------------------
Ship it!
Ship It!
- Jayush Luniya
On April 22, 2016, 1:36 p.m., Mugdha Varadkar wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/46568/
> -----------------------------------------------------------
>
> (Updated April 22, 2016, 1:36 p.m.)
>
>
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Jaimin Jetly, Jonathan Hurley, Jayush Luniya, Robert Levas, and Velmurugan Periasamy.
>
>
> Bugs: AMBARI-13349
> https://issues.apache.org/jira/browse/AMBARI-13349
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Add kerberos support to RANGER service for stack 2.5 onwards
>
> Changes includes:
> 1) Create keytabs and principals for RANGER_ADMIN, RANGER_USERSYNC and RANGER_TAGSYNC component.
> 2) Adding new alerts.json file for stack 2.5 which will use kerberos principal and keytab for web type alert.
>
>
> Diffs
> -----
>
> ambari-common/src/main/python/resource_management/libraries/functions/constants.py 36df2e8
> ambari-common/src/main/python/resource_management/libraries/functions/stack_features.py 2e9123f
> ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/alerts/alert_ranger_admin_passwd_check.py ad95980
> ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py 175115d
> ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py 9f31983
> ambari-server/src/main/resources/stacks/HDP/2.0.6/properties/stack_features.json f4bd028
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/alerts.json PRE-CREATION
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-admin-site.xml d533dbc
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-tagsync-site.xml 9ffc59f
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-ugsync-site.xml PRE-CREATION
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/kerberos.json PRE-CREATION
>
> Diff: https://reviews.apache.org/r/46568/diff/
>
>
> Testing
> -------
>
> Tested Ranger service with kerberos enabled for stack 2.5
>
>
> Thanks,
>
> Mugdha Varadkar
>
>
Re: Review Request 46568: AMBARI-13349 Create a keytab for Ranger
Service for performing Name Lookup to Components
Posted by Robert Levas <rl...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/46568/#review130091
-----------------------------------------------------------
Ship it!
ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-admin-site.xml (lines 72 - 79)
<https://reviews.apache.org/r/46568/#comment193742>
It may not be necessary to add the kerberos princial and keytab properties to this file. The properites will be added when kerberos is enabled.
If they exist in this file then when kerberos is disabled, they wont be removed, they will be set to the empty string. Either is ok, I just wanted you to be aware of this.
- Robert Levas
On April 22, 2016, 9:36 a.m., Mugdha Varadkar wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/46568/
> -----------------------------------------------------------
>
> (Updated April 22, 2016, 9:36 a.m.)
>
>
> Review request for Ambari, Alejandro Fernandez, Gautam Borad, Jaimin Jetly, Jonathan Hurley, Jayush Luniya, Robert Levas, and Velmurugan Periasamy.
>
>
> Bugs: AMBARI-13349
> https://issues.apache.org/jira/browse/AMBARI-13349
>
>
> Repository: ambari
>
>
> Description
> -------
>
> Add kerberos support to RANGER service for stack 2.5 onwards
>
> Changes includes:
> 1) Create keytabs and principals for RANGER_ADMIN, RANGER_USERSYNC and RANGER_TAGSYNC component.
> 2) Adding new alerts.json file for stack 2.5 which will use kerberos principal and keytab for web type alert.
>
>
> Diffs
> -----
>
> ambari-common/src/main/python/resource_management/libraries/functions/constants.py 36df2e8
> ambari-common/src/main/python/resource_management/libraries/functions/stack_features.py 2e9123f
> ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/alerts/alert_ranger_admin_passwd_check.py ad95980
> ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py 175115d
> ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py 9f31983
> ambari-server/src/main/resources/stacks/HDP/2.0.6/properties/stack_features.json f4bd028
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/alerts.json PRE-CREATION
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-admin-site.xml d533dbc
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-tagsync-site.xml 9ffc59f
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/configuration/ranger-ugsync-site.xml PRE-CREATION
> ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER/kerberos.json PRE-CREATION
>
> Diff: https://reviews.apache.org/r/46568/diff/
>
>
> Testing
> -------
>
> Tested Ranger service with kerberos enabled for stack 2.5
>
>
> Thanks,
>
> Mugdha Varadkar
>
>