[jira] [Created] (AMBARI-24957) Admin user might accidentally trigger a kerberize cluster rollback via web browser bookmark

["Magnus Nordlund (JIRA)" <ji...@apache.org>]

Magnus Nordlund created AMBARI-24957:
----------------------------------------

             Summary: Admin user might accidentally trigger a kerberize cluster rollback via web browser bookmark
                 Key: AMBARI-24957
                 URL: https://issues.apache.org/jira/browse/AMBARI-24957
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.7.2
            Reporter: Magnus Nordlund


While kerberizing a cluster, I bookmarked the page with the kerberos wizard to make sure I could return to it in case I lost the connection/browser crash etc. The bookmark created was something like this: 

[http://ambarihost:8080/#/main/admin/kerberos/enable/step6]

Long after successful kerberization, I accidentally clicked the bookmark, bringing me to the kerberos wizard even though no actual kerberization was in progress. I cancelled the wizard. This triggered a kerberos rollback that I was unable to abort before some of the kerberos setting had already been removed. I had then to redo the entire kerberization.

I suggest Ambari keeps track of whether a kerberization is indeed in progress, and if a user tries to access an url like the one I bookmarked, it should present an error message, describing that no kerberization is in progress and allow it to be dismissed with no change in cluster configuration. 

 

I filed this as a bug since I believe it is way too easy to accidentaly trigger a very high-impact process.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)