Author: rvs
Date: Tue Mar 20 17:58:28 2012
New Revision: 1303057
URL: http://svn.apache.org/viewvc?rev=1303057&view=rev
Log:
BIGTOP-469. [puppet] web authentication principal missing from hdfs-site.xml
(Patrick Taylor Ramsey via rvs)
Modified:
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/manifests/init.pp
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/templates/hdfs-site.xml
Modified:
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/manifests/init.pp
URL:
http://svn.apache.org/viewvc/incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/manifests/init.pp?rev=1303057&r1=1303056&r2=1303057&view=diff
==============================================================================
---
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/manifests/init.pp
(original)
+++
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/manifests/init.pp
Tue Mar 20 17:58:28 2012
@@ -24,7 +24,7 @@ class hadoop {
require kerberos::client
kerberos::host_keytab { "hdfs":
- princs => [ "host", "hdfs" ],
+ princs => [ "host", "hdfs", "HTTP" ],
}
kerberos::host_keytab { [ "yarn", "mapreduce" ]:
Modified:
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/templates/hdfs-site.xml
URL:
http://svn.apache.org/viewvc/incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/templates/hdfs-site.xml?rev=1303057&r1=1303056&r2=1303057&view=diff
==============================================================================
---
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/templates/hdfs-site.xml
(original)
+++
incubator/bigtop/branches/hadoop-0.23/bigtop-deploy/puppet/modules/hadoop/templates/hdfs-site.xml
Tue Mar 20 17:58:28 2012
@@ -45,6 +45,15 @@
<name>dfs.namenode.kerberos.https.principal</name>
<value>host/_HOST@<%= kerberos_realm %></value>
</property>
+ <property>
+ <name>dfs.web.authentication.kerberos.keytab</name>
+ <value>/etc/hdfs.keytab</value> <!-- path to the HDFS keytab -->
+ </property>
+ <property>
+ <name>dfs.web.authentication.kerberos.principal</name>
+ <value>HTTP/_HOST@<%= kerberos_realm %></value>
+ </property>
+
<!-- Secondary NameNode security config -->
<property>
