[ https://issues.apache.org/jira/browse/AMBARI-16171?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15313906#comment-15313906 ]
Hudson commented on AMBARI-16171: --------------------------------- FAILURE: Integrated in Ambari-trunk-Commit #4998 (See [https://builds.apache.org/job/Ambari-trunk-Commit/4998/]) AMBARI-16171. Changes to Phoenix QueryServer Kerberos configuration. (mahadev: [http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=66815a1b33f50a4f457f7ff746ff30958eee590d]) * ambari-server/src/test/python/stacks/2.5/common/test_stack_advisor.py * ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py * ambari-server/src/main/resources/stacks/HDP/2.5/services/HBASE/kerberos.json * ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json > Changes to Phoenix QueryServer Kerberos configuration > ----------------------------------------------------- > > Key: AMBARI-16171 > URL: https://issues.apache.org/jira/browse/AMBARI-16171 > Project: Ambari > Issue Type: Improvement > Reporter: Josh Elser > Assignee: Josh Elser > Fix For: 2.4.0 > > Attachments: AMBARI-16171-stackadvisor-WIP.patch, > AMBARI-16171.001.patch, AMBARI-16171.002.patch, AMBARI-16171.003.patch, > AMBARI-16171.006.patch, AMBARI-16171.007.patch, AMBARI-16171.009.patch, > AMBARI-16171.addendum.patch, AMBARI-16171.addendum2-1.patch, > AMBARI-16171.addendum2.patch > > > The up-coming version of Phoenix will contain some new functionality to > support Kerberos authentication of clients via SPNEGO with the Phoenix Query > Server (PQS). > Presently, Ambari will configure PQS to use the hbase service keytab which > will result in the SPNEGO authentication failing as the RFC requires that the > "primary" component of the Kerberos principal for the server is "HTTP". Thus, > we need to ensure that we switch PQS over to use the spnego.service.keytab as > the keytab and "HTTP/_HOST@REALM" as the principal. -- This message was sent by Atlassian JIRA (v6.3.4#6332)