You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by dm...@apache.org on 2015/06/10 15:15:14 UTC

[1/2] ambari git commit: AMBARI-11832. Oozie-site.xml need to add oozie.credentials.credentialclasses value hive2=org.apache.oozie.action.hadoop.Hive2Credentials for secure clusters (dlysnichenko)

Repository: ambari
Updated Branches:
  refs/heads/branch-2.1 08f99fdfe -> 1037ecd87
  refs/heads/trunk 4c6f74aa7 -> 4d18b2db2


AMBARI-11832. Oozie-site.xml need to add oozie.credentials.credentialclasses value hive2=org.apache.oozie.action.hadoop.Hive2Credentials for secure clusters (dlysnichenko)


Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/4d18b2db
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/4d18b2db
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/4d18b2db

Branch: refs/heads/trunk
Commit: 4d18b2db2c81b4e9b67025f6f695193ce344a090
Parents: 4c6f74a
Author: Lisnichenko Dmitro <dl...@hortonworks.com>
Authored: Wed Jun 10 16:14:05 2015 +0300
Committer: Lisnichenko Dmitro <dl...@hortonworks.com>
Committed: Wed Jun 10 16:14:05 2015 +0300

----------------------------------------------------------------------
 .../OOZIE/5.0.0.2.3/kerberos.json               | 70 ++++++++++++++++++++
 1 file changed, 70 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/ambari/blob/4d18b2db/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json b/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json
new file mode 100644
index 0000000..5d17a8f
--- /dev/null
+++ b/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json
@@ -0,0 +1,70 @@
+{
+  "services": [
+    {
+      "name": "OOZIE",
+      "identities": [
+        {
+          "name": "/spnego"
+        },
+        {
+          "name": "/smokeuser"
+        },
+        {
+          "name": "/hdfs"
+        }
+      ],
+      "auth_to_local_properties" : [
+        "oozie-site/oozie.authentication.kerberos.name.rules"
+      ],
+      "configurations": [
+        {
+          "oozie-site": {
+            "oozie.authentication.type": "kerberos",
+            "oozie.service.AuthorizationService.authorization.enabled": "true",
+            "oozie.service.HadoopAccessorService.kerberos.enabled": "true",
+            "local.realm": "${realm}",
+            "oozie.authentication.kerberos.name.rules": "",
+            "oozie.credentials.credentialclasses": "hcat=org.apache.oozie.action.hadoop.HCatCredentials,hive2=org.apache.oozie.action.hadoop.Hive2Credentials"
+          }
+        }
+      ],
+      "components": [
+        {
+          "name": "OOZIE_SERVER",
+          "identities": [
+            {
+              "name": "oozie_server",
+              "principal": {
+                "value": "oozie/_HOST@${realm}",
+                "type" : "service",
+                "configuration": "oozie-site/oozie.service.HadoopAccessorService.kerberos.principal",
+                "local_username" : "${oozie-env/oozie_user}"
+              },
+              "keytab": {
+                "file": "${keytab_dir}/oozie.service.keytab",
+                "owner": {
+                  "name": "${oozie-env/oozie_user}",
+                  "access": "r"
+                },
+                "group": {
+                  "name": "${cluster-env/user_group}",
+                  "access": ""
+                },
+                "configuration": "oozie-site/oozie.service.HadoopAccessorService.keytab.file"
+              }
+            },
+            {
+              "name": "/spnego",
+              "principal": {
+                "configuration": "oozie-site/oozie.authentication.kerberos.principal"
+              },
+              "keytab": {
+                "configuration": "oozie-site/oozie.authentication.kerberos.keytab"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}


[2/2] ambari git commit: AMBARI-11832. Oozie-site.xml need to add oozie.credentials.credentialclasses value hive2=org.apache.oozie.action.hadoop.Hive2Credentials for secure clusters (dlysnichenko)

Posted by dm...@apache.org.
AMBARI-11832. Oozie-site.xml need to add oozie.credentials.credentialclasses value hive2=org.apache.oozie.action.hadoop.Hive2Credentials for secure clusters (dlysnichenko)


Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/1037ecd8
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/1037ecd8
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/1037ecd8

Branch: refs/heads/branch-2.1
Commit: 1037ecd870aa70a0839abe6c474a6da81e1bf749
Parents: 08f99fd
Author: Lisnichenko Dmitro <dl...@hortonworks.com>
Authored: Wed Jun 10 16:14:05 2015 +0300
Committer: Lisnichenko Dmitro <dl...@hortonworks.com>
Committed: Wed Jun 10 16:14:57 2015 +0300

----------------------------------------------------------------------
 .../OOZIE/5.0.0.2.3/kerberos.json               | 70 ++++++++++++++++++++
 1 file changed, 70 insertions(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/ambari/blob/1037ecd8/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json b/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json
new file mode 100644
index 0000000..5d17a8f
--- /dev/null
+++ b/ambari-server/src/main/resources/common-services/OOZIE/5.0.0.2.3/kerberos.json
@@ -0,0 +1,70 @@
+{
+  "services": [
+    {
+      "name": "OOZIE",
+      "identities": [
+        {
+          "name": "/spnego"
+        },
+        {
+          "name": "/smokeuser"
+        },
+        {
+          "name": "/hdfs"
+        }
+      ],
+      "auth_to_local_properties" : [
+        "oozie-site/oozie.authentication.kerberos.name.rules"
+      ],
+      "configurations": [
+        {
+          "oozie-site": {
+            "oozie.authentication.type": "kerberos",
+            "oozie.service.AuthorizationService.authorization.enabled": "true",
+            "oozie.service.HadoopAccessorService.kerberos.enabled": "true",
+            "local.realm": "${realm}",
+            "oozie.authentication.kerberos.name.rules": "",
+            "oozie.credentials.credentialclasses": "hcat=org.apache.oozie.action.hadoop.HCatCredentials,hive2=org.apache.oozie.action.hadoop.Hive2Credentials"
+          }
+        }
+      ],
+      "components": [
+        {
+          "name": "OOZIE_SERVER",
+          "identities": [
+            {
+              "name": "oozie_server",
+              "principal": {
+                "value": "oozie/_HOST@${realm}",
+                "type" : "service",
+                "configuration": "oozie-site/oozie.service.HadoopAccessorService.kerberos.principal",
+                "local_username" : "${oozie-env/oozie_user}"
+              },
+              "keytab": {
+                "file": "${keytab_dir}/oozie.service.keytab",
+                "owner": {
+                  "name": "${oozie-env/oozie_user}",
+                  "access": "r"
+                },
+                "group": {
+                  "name": "${cluster-env/user_group}",
+                  "access": ""
+                },
+                "configuration": "oozie-site/oozie.service.HadoopAccessorService.keytab.file"
+              }
+            },
+            {
+              "name": "/spnego",
+              "principal": {
+                "configuration": "oozie-site/oozie.authentication.kerberos.principal"
+              },
+              "keytab": {
+                "configuration": "oozie-site/oozie.authentication.kerberos.keytab"
+              }
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}