[ambari] branch trunk updated: [AMBARI-23232] Set full name (cn) when creating user accounts in FreeIPA server

[rlevas]

This is an automated email from the ASF dual-hosted git repository.

rlevas pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ambari.git


The following commit(s) were added to refs/heads/trunk by this push:
     new 6f223af  [AMBARI-23232] Set full name (cn) when creating user accounts 
in FreeIPA server
6f223af is described below

commit 6f223af4b1cfe73b57041453e998a70619c394d0
Author: Robert Levas <rle...@hortonworks.com>
AuthorDate: Wed Mar 14 11:00:39 2018 -0400

    [AMBARI-23232] Set full name (cn) when creating user accounts in FreeIPA 
server
---
 .../server/serveraction/kerberos/IPAKerberosOperationHandler.java     | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git 
a/ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/IPAKerberosOperationHandler.java
 
b/ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/IPAKerberosOperationHandler.java
index c411237..64a1bb8 100644
--- 
a/ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/IPAKerberosOperationHandler.java
+++ 
b/ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/IPAKerberosOperationHandler.java
@@ -171,7 +171,7 @@ public class IPAKerberosOperationHandler extends 
KDCKerberosOperationHandler {
     } else {
       String principalName = deconstructedPrincipal.getPrincipalName();
 
-      if (!principalName.equals(principal.toLowerCase())) {
+      if (!principalName.equals(principalName.toLowerCase())) {
         LOG.warn("{} is not in lowercase. FreeIPA does not recognize user " +
             "principals that are not entirely in lowercase. This can lead to 
issues with kinit and keytabs. Make " +
             "sure users are in lowercase.", principalName);
@@ -185,6 +185,8 @@ public class IPAKerberosOperationHandler extends 
KDCKerberosOperationHandler {
           "--first",
           deconstructedPrincipal.getPrimary(),
           "--last",
+          deconstructedPrincipal.getPrimary(),
+          "--cn",
           deconstructedPrincipal.getPrimary()
       };
     }

-- 
To stop receiving notification emails like this one, please contact
rle...@apache.org.