[
https://issues.apache.org/jira/browse/AMBARI-12343?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Robert Levas updated AMBARI-12343:
----------------------------------
Attachment: AMBARI-12343_01.patch
> Ambari storm deployment fails in secure mode due to storm principal name
> ------------------------------------------------------------------------
>
> Key: AMBARI-12343
> URL: https://issues.apache.org/jira/browse/AMBARI-12343
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.1.0
> Reporter: Sriharsha Chintalapani
> Assignee: Robert Levas
> Priority: Blocker
> Fix For: 2.1.0
>
> Attachments: AMBARI-12343-v1.patch, AMBARI-12343.patch,
> AMBARI-12343_01.patch
>
>
> Storm cannot dynamically translate Kerberos principal names to local account
> ids using common auth-to-local rules. It can only strip the realm portion of
> the principal and use that value as the local user id. Because of this,
> automatically adding the cluster name to the principal name of the Storm user
> Kerberos Identity will lead to issues for Storm. Therefore the default
> behavior for generating the Storm user's Kerberos should be to use the
> storm-env/storm_user value.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
