You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by ma...@apache.org on 2015/05/23 00:02:05 UTC

ambari git commit: AMBARI-11313. Need spnego keytab for Ranger KMS. (Velmurugan via mahadev)

Repository: ambari
Updated Branches:
  refs/heads/trunk d2ad633a3 -> d538f38e7


AMBARI-11313. Need spnego keytab for Ranger KMS. (Velmurugan via mahadev)


Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/d538f38e
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/d538f38e
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/d538f38e

Branch: refs/heads/trunk
Commit: d538f38e71bb57f795c4982999284a98ea46946c
Parents: d2ad633
Author: Mahadev Konar <ma...@apache.org>
Authored: Fri May 22 14:58:49 2015 -0700
Committer: Mahadev Konar <ma...@apache.org>
Committed: Fri May 22 14:58:49 2015 -0700

----------------------------------------------------------------------
 .../RANGER_KMS/0.5.0.2.3/kerberos.json          | 46 ++++++++++++++++++++
 1 file changed, 46 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/ambari/blob/d538f38e/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/kerberos.json
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/kerberos.json b/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/kerberos.json
new file mode 100644
index 0000000..69d6b6c
--- /dev/null
+++ b/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/kerberos.json
@@ -0,0 +1,46 @@
+{
+  "services": [
+    {
+      "name": "RANGER_KMS",
+      "identities": [
+        {
+          "name": "/spnego",
+          "keytab": {
+            "configuration": "kms-site/hadoop.kms.authentication.kerberos.keytab"
+          }
+        },
+        {
+          "name": "/smokeuser"
+        }
+      ],
+      "configurations": [
+        {
+          "kms-site": {
+            "hadoop.kms.authentication.type": "kerberos",
+            "hadoop.kms.authentication.kerberos.principal": "*"
+          }
+        }
+      ],
+      "components": [
+        {
+          "name": "RANGER_KMS_SERVER",
+          "identities": [
+            {
+              "name": "/spnego",
+              "principal": {
+                "configuration": "kms-site/hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.principal"
+              },
+              "keytab": {
+                "configuration": "kms-site/hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.keytab"
+              }
+            },
+            {
+              "name": "/smokeuser"
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
+