Andrii Tkach created AMBARI-2491:
------------------------------------
Summary: Security Wizard: show which principals and keytabs need
to be created on which hosts
Key: AMBARI-2491
URL: https://issues.apache.org/jira/browse/AMBARI-2491
Project: Ambari
Issue Type: Bug
Components: client
Affects Versions: 1.2.5
Reporter: Andrii Tkach
Assignee: Andrii Tkach
Priority: Critical
Fix For: 1.2.5
Currently it is very difficult to know what principals and keytabs need to be
created on which hosts.
We should present this information to the end user in a format that is easy to
consume.
The user running the wizard may not be the one who will be creating keytabs and
principals. We can expose the capability to download a csv file and send it to
the appropriate person who may parse the data to create a script to generate
principals/keytabs (or do so manually).
Display the attached as a popup after Configure Services step is done.
Let's show it as a popup so that we don't affect any existing navigation/flow.
For generating the content:
Keytab paths are based on the user input
Principal names are based on the user input
NameNode host: show the nn and HTTP principals and keytab paths
JobTracker host: show the jt principal and keytab path
Oozie Server host: show the oozie and HTTP principals and keytab paths
Nagios Server host: show the nagios principal and keytab path
HBase Master host: show the hbase principal and keytab path
Hive Server host: show the hive principal and keytab path
WebHCat Server host: show the HTTP principal and keytab path
ZooKeeper Server host: show the zookeeper principal and keytab path
DataNode host: show the dn principal and keytab path
TaskTracker host: show the tt principal and keytab path
RegionServer host: show the hbase principal and keytab path
If there are duplicated principals on the same host, display it only once.
There are other rules, but please start with this.
Clickng on "Download CSV" downloads the CSV file
("host-principal-keytab-list.csv"). The same content, except each row is a
comma-delimited list with a \n at the end.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
