You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Sandor Molnar (JIRA)" <ji...@apache.org> on 2018/11/12 15:15:00 UTC

[jira] [Created] (AMBARI-24879) The kadmin service principal name should be configurable for MIT KDC interactions

Sandor Molnar created AMBARI-24879:
--------------------------------------

             Summary: The kadmin service principal name should be configurable for MIT KDC interactions
                 Key: AMBARI-24879
                 URL: https://issues.apache.org/jira/browse/AMBARI-24879
             Project: Ambari
          Issue Type: Task
          Components: ambari-server
    Affects Versions: 2.7.0
            Reporter: Sandor Molnar
            Assignee: Sandor Molnar
             Fix For: 2.8.0


The kadmin service principal name should be configurable for MIT KDC interactions. The current process assumes the kadmin service principal is {{kadmin/FQDN_KADMIN_HOST}}, but this could be different on some installations. For example, {{kadmin/admin}}.

A new kerberos-env property should be added to allow a user to change the kadmin principal name - {{kerberos-env/kadmin_principal_name}}

The default value for the new property should be "{{kadmin/$\{admin_server_host|stripPort()}}}".  To be able to do this, we have to create a new variable replacement _function_. For example, {{stripPort}}.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)