You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by Robert Levas <rl...@hortonworks.com> on 2015/06/25 16:11:00 UTC

Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/
-----------------------------------------------------------

Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.


Bugs: AMBARI-12137
    https://issues.apache.org/jira/browse/AMBARI-12137


Repository: ambari


Description
-------

The storm user principals should be derived using the storm user + cluster name: 
```
storm-${cluster_name}@${realm}
```

The keytab name should be consistent with other headless identities: 
```
storm.headless.keytab
```

#Solution
Update Storm's Kerberos descriptor to fix the relevant identitiy


Diffs
-----

  ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
  ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
  ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
  ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
  ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
  ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 

Diff: https://reviews.apache.org/r/35875/diff/


Testing
-------

Manual testing

Local unit test passed

#Jenkins test results: PENDING


Thanks,

Robert Levas

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Robert Levas <rl...@hortonworks.com>.

> On June 25, 2015, 10:30 a.m., Andrew Onischuk wrote:
> > Ship It!

Thanks!


- Robert


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89355
-----------------------------------------------------------


On June 25, 2015, 10:10 a.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 10:10 a.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Andrew Onischuk <ao...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89355
-----------------------------------------------------------

Ship it!


Ship It!

- Andrew Onischuk


On June 25, 2015, 2:10 p.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 2:10 p.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Robert Levas <rl...@hortonworks.com>.

> On June 25, 2015, 10:12 a.m., Andrew Onischuk wrote:
> > How will it work after ambari upgrade when this file won't be present?
> 
> Robert Levas wrote:
>     I am not sure I understand.  Why wont 'this file' (`kerberos.json`?) be present after the upgrade?
> 
> Andrew Onischuk wrote:
>     Maybe I'm wrong. But it is possible that storm.headless.keytab is not present when user upgrades ambari to 2.1? (user with Ambari-2.0 would have storm.service.keytab instead as far as I understand)
> 
> Robert Levas wrote:
>     Maybe you are referring to `${keytab_dir}/storm.headless.keytab`. Once established, the `kerberos.json` file doesn't come into place. So if Storm was previously Kerberized, whatever the keytab file was as the time will remain and not be an issue. This change only affects newly Kerberized clusters.
> 
> Andrew Onischuk wrote:
>     oh, got it now

Nice thinking though. :) Thanks!


- Robert


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89348
-----------------------------------------------------------


On June 25, 2015, 10:10 a.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 10:10 a.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Robert Levas <rl...@hortonworks.com>.

> On June 25, 2015, 10:12 a.m., Andrew Onischuk wrote:
> > How will it work after ambari upgrade when this file won't be present?

I am not sure I understand.  Why wont 'this file' (`kerberos.json`?) be present after the upgrade?


- Robert


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89348
-----------------------------------------------------------


On June 25, 2015, 10:10 a.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 10:10 a.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Robert Levas <rl...@hortonworks.com>.

> On June 25, 2015, 10:12 a.m., Andrew Onischuk wrote:
> > How will it work after ambari upgrade when this file won't be present?
> 
> Robert Levas wrote:
>     I am not sure I understand.  Why wont 'this file' (`kerberos.json`?) be present after the upgrade?
> 
> Andrew Onischuk wrote:
>     Maybe I'm wrong. But it is possible that storm.headless.keytab is not present when user upgrades ambari to 2.1? (user with Ambari-2.0 would have storm.service.keytab instead as far as I understand)

Maybe you are referring to `${keytab_dir}/storm.headless.keytab`. Once established, the `kerberos.json` file doesn't come into place. So if Storm was previously Kerberized, whatever the keytab file was as the time will remain and not be an issue. This change only affects newly Kerberized clusters.


- Robert


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89348
-----------------------------------------------------------


On June 25, 2015, 10:10 a.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 10:10 a.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Andrew Onischuk <ao...@hortonworks.com>.

> On June 25, 2015, 2:12 p.m., Andrew Onischuk wrote:
> > How will it work after ambari upgrade when this file won't be present?
> 
> Robert Levas wrote:
>     I am not sure I understand.  Why wont 'this file' (`kerberos.json`?) be present after the upgrade?

Maybe I'm wrong. But it is possible that storm.headless.keytab is not present when user upgrades ambari to 2.1? (user with Ambari-2.0 would have storm.service.keytab instead as far as I understand)


- Andrew


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89348
-----------------------------------------------------------


On June 25, 2015, 2:10 p.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 2:10 p.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Andrew Onischuk <ao...@hortonworks.com>.

> On June 25, 2015, 2:12 p.m., Andrew Onischuk wrote:
> > How will it work after ambari upgrade when this file won't be present?
> 
> Robert Levas wrote:
>     I am not sure I understand.  Why wont 'this file' (`kerberos.json`?) be present after the upgrade?
> 
> Andrew Onischuk wrote:
>     Maybe I'm wrong. But it is possible that storm.headless.keytab is not present when user upgrades ambari to 2.1? (user with Ambari-2.0 would have storm.service.keytab instead as far as I understand)
> 
> Robert Levas wrote:
>     Maybe you are referring to `${keytab_dir}/storm.headless.keytab`. Once established, the `kerberos.json` file doesn't come into place. So if Storm was previously Kerberized, whatever the keytab file was as the time will remain and not be an issue. This change only affects newly Kerberized clusters.

oh, got it now


- Andrew


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89348
-----------------------------------------------------------


On June 25, 2015, 2:10 p.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 2:10 p.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Andrew Onischuk <ao...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89348
-----------------------------------------------------------


How will it work after ambari upgrade when this file won't be present?

- Andrew Onischuk


On June 25, 2015, 2:10 p.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 2:10 p.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Robert Levas <rl...@hortonworks.com>.

> On June 25, 2015, 10:31 a.m., Vitalyi Brodetskyi wrote:
> > Ship It!

Thanks!


- Robert


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89356
-----------------------------------------------------------


On June 25, 2015, 10:10 a.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated June 25, 2015, 10:10 a.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>

Re: Review Request 35875: Kerberos: storm headless princ + keytab seem incorrect

Posted by Vitalyi Brodetskyi <vb...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35875/#review89356
-----------------------------------------------------------

Ship it!


Ship It!

- Vitalyi Brodetskyi


On Червень 25, 2015, 2:10 після полудня, Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35875/
> -----------------------------------------------------------
> 
> (Updated Червень 25, 2015, 2:10 після полудня)
> 
> 
> Review request for Ambari, Andrew Onischuk, Emil Anca, Jaimin Jetly, and Vitalyi Brodetskyi.
> 
> 
> Bugs: AMBARI-12137
>     https://issues.apache.org/jira/browse/AMBARI-12137
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The storm user principals should be derived using the storm user + cluster name: 
> ```
> storm-${cluster_name}@${realm}
> ```
> 
> The keytab name should be consistent with other headless identities: 
> ```
> storm.headless.keytab
> ```
> 
> #Solution
> Update Storm's Kerberos descriptor to fix the relevant identitiy
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/STORM/0.9.1.2.1/kerberos.json 94eaae1 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json b1022c3 
>   ambari-server/src/test/python/stacks/2.1/configs/secured-storm-start.json.orig 29b9c83 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json 39f91c0 
>   ambari-server/src/test/python/stacks/2.3/configs/storm_default_secure.json 3ae6941 
>   ambari-web/app/assets/data/stacks/HDP-2.1/service_components.json 75eef5e 
> 
> Diff: https://reviews.apache.org/r/35875/diff/
> 
> 
> Testing
> -------
> 
> Manual testing
> 
> Local unit test passed
> 
> #Jenkins test results: PENDING
> 
> 
> Thanks,
> 
> Robert Levas
> 
>