Repository: ambari Updated Branches: refs/heads/trunk 2d9fd418a -> 8b820346c
AMBARI-22463 Removing secure reference configs entries from stack for Ranger KMS service (mugdha) Project: http://git-wip-us.apache.org/repos/asf/ambari/repo Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/8b820346 Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/8b820346 Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/8b820346 Branch: refs/heads/trunk Commit: 8b820346ca2902016ee2d5d7d5d3ff5d60126933 Parents: 2d9fd41 Author: Mugdha Varadkar <mug...@apache.org> Authored: Mon Nov 20 10:27:46 2017 +0530 Committer: Mugdha Varadkar <mug...@apache.org> Committed: Mon Nov 20 10:57:23 2017 +0530 ---------------------------------------------------------------------- .../0.5.0.2.3/configuration/kms-site.xml | 26 -------------------- .../1.0.0.3.0/configuration/kms-site.xml | 26 -------------------- 2 files changed, 52 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/ambari/blob/8b820346/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/configuration/kms-site.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/configuration/kms-site.xml b/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/configuration/kms-site.xml index 59a6952..5dcdd82 100644 --- a/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/configuration/kms-site.xml +++ b/ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/configuration/kms-site.xml @@ -65,19 +65,6 @@ <on-ambari-upgrade add="true"/> </property> <property> - <name>hadoop.kms.authentication.kerberos.keytab</name> - <value>${user.home}/kms.keytab</value> - <description>Path to the keytab with credentials for the configured Kerberos principal.</description> - <on-ambari-upgrade add="true"/> - </property> - <property> - <name>hadoop.kms.authentication.kerberos.principal</name> - <value>HTTP/localhost</value> - <description>The Kerberos principal to use for the HTTP endpoint. The principal must start with 'HTTP/' as per the Kerberos HTTP SPNEGO specification.</description> - <property-type>KERBEROS_PRINCIPAL</property-type> - <on-ambari-upgrade add="true"/> - </property> - <property> <name>hadoop.kms.authentication.kerberos.name.rules</name> <value>DEFAULT</value> <description>Rules used to resolve Kerberos principal names.</description> @@ -112,19 +99,6 @@ <on-ambari-upgrade add="true"/> </property> <property> - <name>hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.keytab</name> - <value>/etc/hadoop/conf/kms.keytab</value> - <description>The absolute path for the Kerberos keytab with the credentials to connect to Zookeeper.</description> - <on-ambari-upgrade add="true"/> - </property> - <property> - <name>hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.principal</name> - <value>kms/#HOSTNAME#</value> - <description>The Kerberos service principal used to connect to Zookeeper.</description> - <property-type>KERBEROS_PRINCIPAL</property-type> - <on-ambari-upgrade add="true"/> - </property> - <property> <name>hadoop.kms.security.authorization.manager</name> <value>org.apache.ranger.authorization.kms.authorizer.RangerKmsAuthorizer</value> <description/> http://git-wip-us.apache.org/repos/asf/ambari/blob/8b820346/ambari-server/src/main/resources/common-services/RANGER_KMS/1.0.0.3.0/configuration/kms-site.xml ---------------------------------------------------------------------- diff --git a/ambari-server/src/main/resources/common-services/RANGER_KMS/1.0.0.3.0/configuration/kms-site.xml b/ambari-server/src/main/resources/common-services/RANGER_KMS/1.0.0.3.0/configuration/kms-site.xml index 1e6f7b5..19ce76f 100644 --- a/ambari-server/src/main/resources/common-services/RANGER_KMS/1.0.0.3.0/configuration/kms-site.xml +++ b/ambari-server/src/main/resources/common-services/RANGER_KMS/1.0.0.3.0/configuration/kms-site.xml @@ -65,19 +65,6 @@ <on-ambari-upgrade add="false"/> </property> <property> - <name>hadoop.kms.authentication.kerberos.keytab</name> - <value>${user.home}/kms.keytab</value> - <description>Path to the keytab with credentials for the configured Kerberos principal.</description> - <on-ambari-upgrade add="false"/> - </property> - <property> - <name>hadoop.kms.authentication.kerberos.principal</name> - <value>HTTP/localhost</value> - <description>The Kerberos principal to use for the HTTP endpoint. The principal must start with 'HTTP/' as per the Kerberos HTTP SPNEGO specification.</description> - <property-type>KERBEROS_PRINCIPAL</property-type> - <on-ambari-upgrade add="false"/> - </property> - <property> <name>hadoop.kms.authentication.kerberos.name.rules</name> <value>DEFAULT</value> <description>Rules used to resolve Kerberos principal names.</description> @@ -112,19 +99,6 @@ <on-ambari-upgrade add="false"/> </property> <property> - <name>hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.keytab</name> - <value>/etc/hadoop/conf/kms.keytab</value> - <description>The absolute path for the Kerberos keytab with the credentials to connect to Zookeeper.</description> - <on-ambari-upgrade add="false"/> - </property> - <property> - <name>hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.principal</name> - <value>kms/#HOSTNAME#</value> - <description>The Kerberos service principal used to connect to Zookeeper.</description> - <property-type>KERBEROS_PRINCIPAL</property-type> - <on-ambari-upgrade add="false"/> - </property> - <property> <name>hadoop.kms.security.authorization.manager</name> <value>org.apache.ranger.authorization.kms.authorizer.RangerKmsAuthorizer</value> <description/>