[jira] [Resolved] (AMBARI-8912) ADKerberosOperationHandler should strip realmname from principal name before creating principal

["Robert Levas (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-8912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Robert Levas resolved AMBARI-8912.
----------------------------------
    Resolution: Fixed

This issue was resolved with the resolution of AMBARI-9170


> ADKerberosOperationHandler should strip realmname from principal name before creating principal
> -----------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-8912
>                 URL: https://issues.apache.org/jira/browse/AMBARI-8912
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Dilli Arumugam
>            Assignee: Dilli Arumugam
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-8912.1.patch
>
>
> If principalName passed to ADKerberosOperationHandler contains realm suffix such as nn/c6401.ambari.apache.org@KNOX.COM, the suffix realm should be stripped before we create ldap entry in AD.  We already suffix the realm name in user principal name in ADKerberosOperationHandler. So, if we do not strip the realmname in incoming principalname we end up with realm name suffixed twice.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)