You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by ad...@apache.org on 2017/06/08 09:25:49 UTC
[1/2] ambari git commit: AMBARI-21146. Knox JAAS configuration file
should not allow the Kerberos ticket cache to be used when establishing its
identity on startup (Attila Magyar via adoroszlai)
Repository: ambari
Updated Branches:
refs/heads/branch-2.5 87e993e87 -> 24dcb1c85
refs/heads/trunk 9b44b62f6 -> e71f49e4e
AMBARI-21146. Knox JAAS configuration file should not allow the Kerberos ticket cache to be used when establishing its identity on startup (Attila Magyar via adoroszlai)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/e71f49e4
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/e71f49e4
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/e71f49e4
Branch: refs/heads/trunk
Commit: e71f49e4ef30ff720ad4f8b7fb3823d68acd48cc
Parents: 9b44b62
Author: Attila Magyar <am...@hortonworks.com>
Authored: Thu Jun 8 11:23:29 2017 +0200
Committer: Attila Doroszlai <ad...@hortonworks.com>
Committed: Thu Jun 8 11:23:29 2017 +0200
----------------------------------------------------------------------
.../KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2 | 9 +++------
.../KNOX/0.5.0.3.0/package/templates/krb5JAASLogin.conf.j2 | 9 +++------
2 files changed, 6 insertions(+), 12 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ambari/blob/e71f49e4/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2 b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
index fa3237b..29b2179 100644
--- a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
+++ b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
@@ -17,14 +17,11 @@
#}
com.sun.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required
-renewTGT=true
+renewTGT=false
doNotPrompt=true
useKeyTab=true
keyTab="{{knox_keytab_path}}"
principal="{{knox_principal_name}}"
-isInitiator=true
storeKey=true
-useTicketCache=true
-client=true;
-};
-
+useTicketCache=false;
+};
\ No newline at end of file
http://git-wip-us.apache.org/repos/asf/ambari/blob/e71f49e4/ambari-server/src/main/resources/common-services/KNOX/0.5.0.3.0/package/templates/krb5JAASLogin.conf.j2
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.3.0/package/templates/krb5JAASLogin.conf.j2 b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.3.0/package/templates/krb5JAASLogin.conf.j2
index fa3237b..29b2179 100644
--- a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.3.0/package/templates/krb5JAASLogin.conf.j2
+++ b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.3.0/package/templates/krb5JAASLogin.conf.j2
@@ -17,14 +17,11 @@
#}
com.sun.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required
-renewTGT=true
+renewTGT=false
doNotPrompt=true
useKeyTab=true
keyTab="{{knox_keytab_path}}"
principal="{{knox_principal_name}}"
-isInitiator=true
storeKey=true
-useTicketCache=true
-client=true;
-};
-
+useTicketCache=false;
+};
\ No newline at end of file
[2/2] ambari git commit: AMBARI-21146. Knox JAAS configuration file
should not allow the Kerberos ticket cache to be used when establishing its
identity on startup (Attila Magyar via adoroszlai)
Posted by ad...@apache.org.
AMBARI-21146. Knox JAAS configuration file should not allow the Kerberos ticket cache to be used when establishing its identity on startup (Attila Magyar via adoroszlai)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/24dcb1c8
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/24dcb1c8
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/24dcb1c8
Branch: refs/heads/branch-2.5
Commit: 24dcb1c851ede76bda0759a980a6c5106a208141
Parents: 87e993e
Author: Attila Magyar <am...@hortonworks.com>
Authored: Thu Jun 8 11:24:56 2017 +0200
Committer: Attila Doroszlai <ad...@hortonworks.com>
Committed: Thu Jun 8 11:24:56 2017 +0200
----------------------------------------------------------------------
.../KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2 | 9 +++------
1 file changed, 3 insertions(+), 6 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ambari/blob/24dcb1c8/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2 b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
index fa3237b..29b2179 100644
--- a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
+++ b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
@@ -17,14 +17,11 @@
#}
com.sun.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required
-renewTGT=true
+renewTGT=false
doNotPrompt=true
useKeyTab=true
keyTab="{{knox_keytab_path}}"
principal="{{knox_principal_name}}"
-isInitiator=true
storeKey=true
-useTicketCache=true
-client=true;
-};
-
+useTicketCache=false;
+};
\ No newline at end of file