[jira] [Commented] (AMBARI-7890) Make changes in ambari-web code to support knox kerberization

["Jaimin D Jetly (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMBARI-7890?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14180509#comment-14180509 ] 

Jaimin D Jetly commented on AMBARI-7890:
----------------------------------------

[~kminder] [~sumit.gupta]
The description of this ticket is taken from the link: http://knox.apache.org/books/knox-0-5-0/knox-0-5-0.html#Secure+Clusters
Most of the properties that needs to be changed has *knox* in it's name. For example  {{hadoop.proxyuser.knox.groups}}

*What does knox part in the property name signify over here ?*
I want to make sure that when user customizes the service name for knox service or primary name of the knox principal (knox@EXAMPLE.COM) stated in the Jaas file, the new configs that are injected in other service's site.xml holds true


> Make changes in ambari-web code to support knox kerberization
> -------------------------------------------------------------
>
>                 Key: AMBARI-7890
>                 URL: https://issues.apache.org/jira/browse/AMBARI-7890
>             Project: Ambari
>          Issue Type: Technical task
>          Components: ambari-web
>    Affects Versions: 1.7.0
>            Reporter: Jaimin D Jetly
>            Assignee: Jaimin D Jetly
>             Fix For: 1.7.0
>
>
> *1. Show knox section on Configure Services page with the {{knox_principal_name}} and {{knox_keytab_path}} properties. These properties will be added to knox-env.xml file*
> *2. Edit core-site.xml if HDFS service is installed on the cluster*
> {code}
> <property>
>     <name>hadoop.proxyuser.knox.groups</name>
>     <value>users</value>
> </property>
> <property>
>     <name>hadoop.proxyuser.knox.hosts</name>
>     <value>FQDN_OF_KNOX_HOST</value>
> </property>
> {code}
> *3. Edit webhcat-site.xml if Hive is installed*
> {code}
> <property>
>     <name>webhcat.proxyuser.knox.groups</name>
>     <value>users</value>
> </property>
> <property>
>     <name>webhcat.proxyuser.knox.hosts</name>
>     <value>FQDN_OF_KNOX_HOST</value>
> </property>
> {code}
> *4. Edit oozie-site.xml if Oozie is installed*
> {code}
> <property>
>    <name>oozie.service.ProxyUserService.proxyuser.knox.groups</name>
>    <value>users</value>
> </property>
> <property>
>    <name>oozie.service.ProxyUserService.proxyuser.knox.hosts</name>
>    <value>FQDN_OF_KNOX_HOST</value>
> </property>
> {code}
> *5. Edit hive-site.xml (Enable http transport mode and use substitution in Hive Server2.)*
> hive.server2.allow.user.substitution=true
> hive.server2.transport.mode=http 
> hive.server2.thrift.http.port=10001
> hive.server2.thrift.http.path=cliservice
> *6. Edit gateway-site.xml*
> gateway.hadoop.kerberos.secured=true



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)