You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Josh Elser (JIRA)" <ji...@apache.org> on 2016/05/24 14:48:13 UTC
[jira] [Comment Edited] (AMBARI-16171) Changes to Phoenix
QueryServer Kerberos configuration
[ https://issues.apache.org/jira/browse/AMBARI-16171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15298288#comment-15298288 ]
Josh Elser edited comment on AMBARI-16171 at 5/24/16 2:47 PM:
--------------------------------------------------------------
[~srimanth.gunturi] based on our conversation offline yesterday, this is what I tried to put together for a stack advisor update, but I'm at a loss of how to even start testing it. Your help would be greatly appreciated.
https://issues.apache.org/jira/secure/attachment/12805903/AMBARI-16171-stackadvisor-WIP.patch
was (Author: elserj):
[~srimanth.gunturi] based on our conversation offline yesterday, this is what I tried to put together for a stack advisor update, but I'm at a loss of how to even start testing it. Your help would be greatly appreciated.
> Changes to Phoenix QueryServer Kerberos configuration
> -----------------------------------------------------
>
> Key: AMBARI-16171
> URL: https://issues.apache.org/jira/browse/AMBARI-16171
> Project: Ambari
> Issue Type: Improvement
> Reporter: Josh Elser
> Assignee: Josh Elser
> Attachments: AMBARI-16171-stackadvisor-WIP.patch, AMBARI-16171.001.patch, AMBARI-16171.002.patch, AMBARI-16171.003.patch, AMBARI-16171.006.patch, AMBARI-16171.007.patch
>
>
> The up-coming version of Phoenix will contain some new functionality to support Kerberos authentication of clients via SPNEGO with the Phoenix Query Server (PQS).
> Presently, Ambari will configure PQS to use the hbase service keytab which will result in the SPNEGO authentication failing as the RFC requires that the "primary" component of the Kerberos principal for the server is "HTTP". Thus, we need to ensure that we switch PQS over to use the spnego.service.keytab as the keytab and "HTTP/_HOST@REALM" as the principal.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)