You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Doroszlai, Attila (JIRA)" <ji...@apache.org> on 2018/01/03 11:09:00 UTC

[jira] [Updated] (AMBARI-22719) Regenerate Keytabs resets security.inter.broker.protocol to PLAINTEXTSASL

     [ https://issues.apache.org/jira/browse/AMBARI-22719?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Doroszlai, Attila updated AMBARI-22719:
---------------------------------------
    Attachment: AMBARI-22719.branch-2.6.patch

> Regenerate Keytabs resets security.inter.broker.protocol to PLAINTEXTSASL
> -------------------------------------------------------------------------
>
>                 Key: AMBARI-22719
>                 URL: https://issues.apache.org/jira/browse/AMBARI-22719
>             Project: Ambari
>          Issue Type: Bug
>          Components: stacks
>    Affects Versions: 2.6.1
>            Reporter: Doroszlai, Attila
>            Assignee: Doroszlai, Attila
>             Fix For: 3.0.0, 2.6.2
>
>         Attachments: AMBARI-22719.branch-2.6.patch
>
>
> STR:
> # Install Ambari 2.6.1
> # Deploy secure cluster (ZooKeeper + Kafka)
> # Set {{security.inter.broker.protocol}} to {{SASL_PLAINTEXT}} (or {{SASL_SSL}})
> # Remove {{security.inter.broker.protocol}} from cluster Kerberos descriptor or update it to {{SASL_PLAINTEXT}} (or {{SASL_SSL}})
>  ([steps|https://community.hortonworks.com/articles/89713/updating-the-user-sepecified-kerberos-descriptor.html])
> # Regenerate Keytabs
> Result: {{security.inter.broker.protocol}} is reset to {{PLAINTEXTSASL}}
> This is caused by stack advisor forcing {{PLAINTEXTSASL}} for secure cluster, although {{SASL_PLAINTEXT}} (or {{SASL_SSL}}) is also valid.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)