You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Hadoop QA (JIRA)" <ji...@apache.org> on 2016/06/28 09:32:57 UTC
[jira] [Commented] (AMBARI-17320) AmbariServer looks for ldap_url,
container_dn in blueprint even for MIT security type
[ https://issues.apache.org/jira/browse/AMBARI-17320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15352669#comment-15352669 ]
Hadoop QA commented on AMBARI-17320:
------------------------------------
{color:red}-1 overall{color}. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12813978/AMBARI-17320_01.patch
against trunk revision .
{color:green}+1 @author{color}. The patch does not contain any @author tags.
{color:red}-1 tests included{color}. The patch doesn't appear to include any new or modified tests.
Please justify why no new tests are needed for this patch.
Also please list what manual steps were performed to verify this patch.
{color:green}+1 javac{color}. The applied patch does not increase the total number of javac compiler warnings.
{color:green}+1 release audit{color}. The applied patch does not increase the total number of release audit warnings.
{color:green}+1 core tests{color}. The patch passed unit tests in ambari-server.
Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/7569//testReport/
Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/7569//console
This message is automatically generated.
> AmbariServer looks for ldap_url, container_dn in blueprint even for MIT security type
> -------------------------------------------------------------------------------------
>
> Key: AMBARI-17320
> URL: https://issues.apache.org/jira/browse/AMBARI-17320
> Project: Ambari
> Issue Type: Bug
> Affects Versions: 2.4.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Labels: kerberos
> Fix For: 2.4.0
>
> Attachments: AMBARI-17320_01.patch
>
>
> {{ldap_url}} and {{container_dn}} are expected for MIT security type. They should only be required for AD integration.
> {code:title=Example BP}
> {
> "configurations": [
> {
> "cluster-env": {
> "properties": {
> "command_retry_max_time_in_sec": "1200"
> }
> }
> },
> {
> "kerberos-env": {
> "properties": {
> "realm": "EXAMPLE.COM",
> "kdc_type": "mit-kdc",
> "kdc_hosts": "kdc.example.com",
> "admin_server_host": "kdc.example.com",
> "encryption_types": "aes des3-cbc-sha1 rc4 des-cbc-md5",
> "service_check_principal_name": "cl1-QutreRP8p3"
> }
> }
> },
> {
> "krb5-conf": {
> "properties": {
> "domains": "",
> "manage_krb5_conf": "true"
> }
> }
> }
> ],
> "host_groups": [
> {
> "name": "host1",
> "cardinality": "1",
> "components": [
> {
> "name": "DATANODE"
> },
> {
> "name": "NFS_GATEWAY"
> },
> {
> "name": "HDFS_CLIENT"
> },
> {
> "name": "NODEMANAGER"
> },
> {
> "name": "YARN_CLIENT"
> },
> {
> "name": "MAPREDUCE2_CLIENT"
> },
> {
> "name": "HBASE_REGIONSERVER"
> },
> {
> "name": "HBASE_CLIENT"
> },
> {
> "name": "PHOENIX_QUERY_SERVER"
> },
> {
> "name": "HIVE_CLIENT"
> },
> {
> "name": "HCAT"
> },
> {
> "name": "OOZIE_CLIENT"
> },
> {
> "name": "ZOOKEEPER_CLIENT"
> },
> {
> "name": "SUPERVISOR"
> },
> {
> "name": "FALCON_CLIENT"
> },
> {
> "name": "FLUME_HANDLER"
> },
> {
> "name": "METRICS_MONITOR"
> },
> {
> "name": "RANGER_TAGSYNC"
> },
> {
> "name": "TEZ_CLIENT"
> },
> {
> "name": "PIG"
> },
> {
> "name": "SQOOP"
> },
> {
> "name": "SLIDER"
> },
> {
> "name": "KERBEROS_CLIENT"
> },
> {
> "name": "MAHOUT"
> },
> {
> "name": "HST_AGENT"
> },
> {
> "name": "LOGSEARCH_LOGFEEDER"
> },
> {
> "name": "LOGSEARCH_SOLR_CLIENT"
> }
> ]
> }
> ],
> "Blueprints": {
> "blueprint_name": "bp1",
> "stack_name": "HDP",
> "stack_version": "2.5"
> }
> }
> {code}
> {noformat}
> curl -H "X-Requested-By:ambari" -u admin:admin -i -X POST -d @./bp1.json http://localhost:8080/api/v1/blueprints/bp1
> HTTP/1.1 100 Continue
> HTTP/1.1 400 Bad Request
> Date: Mon, 20 Jun 2016 19:02:27 GMT
> X-Frame-Options: DENY
> X-XSS-Protection: 1; mode=block
> Set-Cookie: AMBARISESSIONID=1a4dqzhedwoog4xg8jbu36e2q;Path=/;HttpOnly
> Expires: Thu, 01 Jan 1970 00:00:00 GMT
> User: admin
> Content-Type: text/plain
> Content-Length: 227
> Server: Jetty(9.2.11.v20150529)
> {
> "status" : 400,
> "message" : "Blueprint configuration validation failed: Missing required properties. Specify a value for these properties in the blueprint configuration. {host1={kerberos-env=[ldap_url, container_dn]}}"
> }
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)