You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2018/01/04 11:28:00 UTC
[jira] [Commented] (AMBARI-22719) Regenerate Keytabs resets
security.inter.broker.protocol to PLAINTEXTSASL
[ https://issues.apache.org/jira/browse/AMBARI-22719?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16311219#comment-16311219 ]
Hudson commented on AMBARI-22719:
---------------------------------
FAILURE: Integrated in Jenkins build Ambari-branch-2.6 #561 (See [https://builds.apache.org/job/Ambari-branch-2.6/561/])
AMBARI-22719. Regenerate Keytabs resets security.inter.broker.protocol (adoroszlai: [http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=6e58eccdfc71f81c3d60ee66e305626589277e69])
* (edit) ambari-server/src/test/python/stacks/2.3/common/test_stack_advisor.py
* (edit) ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
> Regenerate Keytabs resets security.inter.broker.protocol to PLAINTEXTSASL
> -------------------------------------------------------------------------
>
> Key: AMBARI-22719
> URL: https://issues.apache.org/jira/browse/AMBARI-22719
> Project: Ambari
> Issue Type: Bug
> Components: stacks
> Affects Versions: 2.6.1
> Reporter: Doroszlai, Attila
> Assignee: Doroszlai, Attila
> Fix For: 3.0.0, 2.6.2
>
> Attachments: AMBARI-22719.branch-2.6.patch, AMBARI-22719.trunk.patch
>
>
> STR:
> # Install Ambari 2.6.1
> # Deploy secure cluster (ZooKeeper + Kafka)
> # Set {{security.inter.broker.protocol}} to {{SASL_PLAINTEXT}} (or {{SASL_SSL}})
> # Remove {{security.inter.broker.protocol}} from cluster Kerberos descriptor or update it to {{SASL_PLAINTEXT}} (or {{SASL_SSL}})
> ([steps|https://community.hortonworks.com/articles/89713/updating-the-user-sepecified-kerberos-descriptor.html])
> # Regenerate Keytabs
> Result: {{security.inter.broker.protocol}} is reset to {{PLAINTEXTSASL}}
> This is caused by stack advisor forcing {{PLAINTEXTSASL}} for secure cluster, although {{SASL_PLAINTEXT}} (or {{SASL_SSL}}) is also valid.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)