You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by ad...@apache.org on 2017/06/08 09:25:50 UTC
[2/2] ambari git commit: AMBARI-21146. Knox JAAS configuration file
should not allow the Kerberos ticket cache to be used when establishing its
identity on startup (Attila Magyar via adoroszlai)
AMBARI-21146. Knox JAAS configuration file should not allow the Kerberos ticket cache to be used when establishing its identity on startup (Attila Magyar via adoroszlai)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/24dcb1c8
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/24dcb1c8
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/24dcb1c8
Branch: refs/heads/branch-2.5
Commit: 24dcb1c851ede76bda0759a980a6c5106a208141
Parents: 87e993e
Author: Attila Magyar <am...@hortonworks.com>
Authored: Thu Jun 8 11:24:56 2017 +0200
Committer: Attila Doroszlai <ad...@hortonworks.com>
Committed: Thu Jun 8 11:24:56 2017 +0200
----------------------------------------------------------------------
.../KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2 | 9 +++------
1 file changed, 3 insertions(+), 6 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ambari/blob/24dcb1c8/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2 b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
index fa3237b..29b2179 100644
--- a/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
+++ b/ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/templates/krb5JAASLogin.conf.j2
@@ -17,14 +17,11 @@
#}
com.sun.security.jgss.initiate {
com.sun.security.auth.module.Krb5LoginModule required
-renewTGT=true
+renewTGT=false
doNotPrompt=true
useKeyTab=true
keyTab="{{knox_keytab_path}}"
principal="{{knox_principal_name}}"
-isInitiator=true
storeKey=true
-useTicketCache=true
-client=true;
-};
-
+useTicketCache=false;
+};
\ No newline at end of file