You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2018/02/16 13:14:07 UTC
[jira] [Commented] (AMBARI-20586) Add (optional) master_kdcs to
kerberos-env and generated krb5.conf file
[ https://issues.apache.org/jira/browse/AMBARI-20586?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16367026#comment-16367026 ]
Hudson commented on AMBARI-20586:
---------------------------------
FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #8744 (See [https://builds.apache.org/job/Ambari-trunk-Commit/8744/])
AMBARI-20586. Add (optional) master_kdcs to kerberos-env and generated (aonishuk: [https://gitbox.apache.org/repos/asf?p=ambari.git&a=commit&h=c17979cb734779f0a8511e5c852399f56cbcfa97])
* (edit) ambari-server/src/test/python/stacks/2.2/KERBEROS/use_cases.py
* (edit) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/configuration/kerberos-env.xml
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/package/scripts/kerberos_common.py
* (delete) ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/package/templates/krb5_conf.j2
* (add) ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/properties/krb5_conf.j2
* (edit) ambari-server/src/main/java/org/apache/ambari/server/controller/internal/BlueprintConfigurationProcessor.java
* (edit) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/package/scripts/params.py
* (edit) ambari-server/src/test/java/org/apache/ambari/server/controller/internal/BlueprintConfigurationProcessorTest.java
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/configuration/kerberos-env.xml
* (add) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/properties/krb5_conf.j2
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/configuration/krb5-conf.xml
* (edit) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/configuration/krb5-conf.xml
* (edit) ambari-server/src/main/resources/stacks/PERF/1.0/services/KERBEROS/package/scripts/params.py
* (edit) ambari-server/src/test/python/stacks/2.2/KERBEROS/test_kerberos_client.py
* (delete) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/package/templates/krb5_conf.j2
* (edit) ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_common.py
> Add (optional) master_kdcs to kerberos-env and generated krb5.conf file
> -----------------------------------------------------------------------
>
> Key: AMBARI-20586
> URL: https://issues.apache.org/jira/browse/AMBARI-20586
> Project: Ambari
> Issue Type: Bug
> Reporter: Balázs Bence Sári
> Assignee: Balázs Bence Sári
> Priority: Major
> Fix For: 3.0.0, 2.5.1
>
> Attachments: AMBARI-20586-Master-kdc_trunk_v4.patch
>
>
> Add (optional) {{master_kdcs}} to {{kerberos-env}} and generated krb5.conf file. If {{kerberos-env/master_kdcs}} is not empty, it should contain a list of IP addresses or FQDNs for one or more KDCs. Multiple entries should be comma-delimited.
> According to https://web.mit.edu/kerberos/krb5-1.12/doc/admin/conf_files/krb5_conf.html:
> {quote}
> master_kdc
> Identifies the master KDC(s). Currently, this tag is used in only one case: If an attempt to get credentials fails because of an invalid password, the client software will attempt to contact the master KDC, in case the user’s password has just been changed, and the updated database has not been propagated to the slave servers yet.
> {quote}
> This should help with scenarios where multiple KDCs are in a master/slave (or replicated) configuration.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)