You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2015/02/02 23:54:53 UTC
[jira] [Commented] (AMBARI-8976) Use cluster property rather than
cluster-env/security_enabled to enable or disable Kerberos
[ https://issues.apache.org/jira/browse/AMBARI-8976?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14302156#comment-14302156 ]
Hudson commented on AMBARI-8976:
--------------------------------
FAILURE: Integrated in Ambari-trunk-Commit-docker #841 (See [https://builds.apache.org/job/Ambari-trunk-Commit-docker/841/])
AMBARI-8976. Use cluster property rather than cluster-env/security_enabled to enable or disable Kerberos. (rlevas via yusaku) (yusaku: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=f296ba851494ec9cb876e52f1ece6ed74592ca7d)
* ambari-server/src/main/java/org/apache/ambari/server/orm/entities/ClusterEntity.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/ClusterResponse.java
* ambari-server/src/main/resources/Ambari-DDL-Oracle-CREATE.sql
* ambari-server/src/test/java/org/apache/ambari/server/controller/BackgroundCustomCommandExecutionTest.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariCustomCommandExecutionHelperTest.java
* ambari-server/docs/api/v1/clusters-cluster.md
* ambari-server/src/test/java/org/apache/ambari/server/controller/ClusterResponseTest.java
* ambari-server/src/main/java/org/apache/ambari/server/state/Cluster.java
* ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog200Test.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariManagementControllerTest.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelper.java
* ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog200.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariManagementControllerImpl.java
* ambari-server/src/main/resources/Ambari-DDL-MySQL-CREATE.sql
* ambari-server/src/main/java/org/apache/ambari/server/controller/internal/ServiceResourceProvider.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/RefreshYarnCapacitySchedulerReleaseConfigTest.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/ClusterRequest.java
* ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/internal/AbstractResourceProviderTest.java
* ambari-server/src/main/java/org/apache/ambari/server/state/SecurityType.java
* ambari-server/src/main/java/org/apache/ambari/server/controller/internal/ClusterResourceProvider.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/ClusterRequestTest.java
* ambari-server/src/main/resources/Ambari-DDL-Postgres-EMBEDDED-CREATE.sql
* ambari-server/src/test/java/org/apache/ambari/server/controller/internal/ClusterResourceProviderTest.java
* ambari-server/src/main/resources/Ambari-DDL-Postgres-CREATE.sql
* ambari-server/src/main/resources/properties.json
* ambari-server/src/main/resources/Ambari-DDL-SQLServer-CREATE.sql
* ambari-server/src/main/java/org/apache/ambari/server/state/cluster/ClusterImpl.java
* ambari-server/src/test/java/org/apache/ambari/server/controller/AmbariManagementControllerImplTest.java
> Use cluster property rather than cluster-env/security_enabled to enable or disable Kerberos
> -------------------------------------------------------------------------------------------
>
> Key: AMBARI-8976
> URL: https://issues.apache.org/jira/browse/AMBARI-8976
> Project: Ambari
> Issue Type: Task
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Blocker
> Labels: kerberos
> Fix For: 2.0.0
>
> Attachments: AMBARI-8976_01.patch, AMBARI-8976_02.patch
>
>
> Use a cluster property rather than {{cluster-env/security_enabled}} to enable or disable Kerberos. Since {{cluster-env/security_enabled}} is used by services to determine if Kerberos is enabled or not, it should not be set before completing the process of enabling or disabling Kerberos. To declare whether the cluster enable or disable Kerberos, a property on the cluster should be set. The property should be called {{security_type}} and must have one of the following values:
> * NONE
> * KERBEROS
> By using {{cluster-env/security_enabled}}, the configuration property gets set to "true" before Kerberos is filly enabled. This is causing issues with stopping services so that the updated Kerberos-related configurations can be set.
> Example API call to enable Kerberos
> {code:title=PUT /api/v1/clusters/c1}
> {
> "Clusters" : {
> "security_type" : "KERBEROS"
> }
> }
> {code}
> Example API call to disable Kerberos
> {code:title=PUT /api/v1/clusters/c1}
> {
> "Clusters" : {
> "security_type" : "NONE"
> }
> }
> {code}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)