You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Doroszlai, Attila (JIRA)" <ji...@apache.org> on 2018/01/03 11:09:00 UTC
[jira] [Updated] (AMBARI-22719) Regenerate Keytabs resets
security.inter.broker.protocol to PLAINTEXTSASL
[ https://issues.apache.org/jira/browse/AMBARI-22719?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Doroszlai, Attila updated AMBARI-22719:
---------------------------------------
Attachment: AMBARI-22719.branch-2.6.patch
> Regenerate Keytabs resets security.inter.broker.protocol to PLAINTEXTSASL
> -------------------------------------------------------------------------
>
> Key: AMBARI-22719
> URL: https://issues.apache.org/jira/browse/AMBARI-22719
> Project: Ambari
> Issue Type: Bug
> Components: stacks
> Affects Versions: 2.6.1
> Reporter: Doroszlai, Attila
> Assignee: Doroszlai, Attila
> Fix For: 3.0.0, 2.6.2
>
> Attachments: AMBARI-22719.branch-2.6.patch
>
>
> STR:
> # Install Ambari 2.6.1
> # Deploy secure cluster (ZooKeeper + Kafka)
> # Set {{security.inter.broker.protocol}} to {{SASL_PLAINTEXT}} (or {{SASL_SSL}})
> # Remove {{security.inter.broker.protocol}} from cluster Kerberos descriptor or update it to {{SASL_PLAINTEXT}} (or {{SASL_SSL}})
> ([steps|https://community.hortonworks.com/articles/89713/updating-the-user-sepecified-kerberos-descriptor.html])
> # Regenerate Keytabs
> Result: {{security.inter.broker.protocol}} is reset to {{PLAINTEXTSASL}}
> This is caused by stack advisor forcing {{PLAINTEXTSASL}} for secure cluster, although {{SASL_PLAINTEXT}} (or {{SASL_SSL}}) is also valid.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)