[
https://issues.apache.org/jira/browse/AMBARI-24335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Olivér Szabó resolved AMBARI-24335.
-----------------------------------
Resolution: Fixed
> Update service metainfo to declare Kerberos is required for SSO integration
> support
> -----------------------------------------------------------------------------------
>
> Key: AMBARI-24335
> URL: https://issues.apache.org/jira/browse/AMBARI-24335
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.7.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Major
> Labels: pull-request-available
> Fix For: 2.7.1
>
> Time Spent: 1h
> Remaining Estimate: 0h
>
> Update service metainfo to declare Kerberos is required for SSO integration
> support.
> The metainfo file allow for a service to indicate that is supports SSO
> integration.
> {code:java|title=Example}
> <sso>
> <supported>true</supported>
>
> <enabledConfiguration>service-site/knox.sso.enabled</enabledConfiguration>
> </sso>
> {code}
> However, some services required that Kerberos is enabled to support SSO. This
> needs to be indicated in the metainfo so that Ambari knows how to behave
> properly.
> {code:java|title=Example}
> <sso>
> <supported>true</supported>
>
> <enabledConfiguration>service-site/knox.sso.enabled</enabledConfiguration>
> <kerberosRequired>true</kerberosRequired>
> </sso>
> {code}
> Along with this change, the following API request needs to be updated to
> supply the relevant data:
> {noformat:title=Get stack service details}
> GET /api/v1/stacks/:STACK_NAME/versions/:VERSION/services/:SERVICE_NAME",
> {
> "href" : ":URL",
> "StackServices" : {
> ...
> "sso_integration_supported": "true",
> "sso_integration_requires_kerberos": "true",
> ...
> },
> ...
> {noformat}
> {noformat:title=Get installed service information}
> GET /api/v1/clusters/:CLUSTER_NAME/services/:SERVICE_NAME
> {
> "href" : ":URL",
> "ServiceInfo" : {
> "cluster_name" : ":CLUSTER_NAME",
> ...
> "sso_integration_supported": "true",
> "sso_integration_requires_kerberos": "true",
> "sso_integration_enabled": "false",
> "sso_integration_desired": "false",
> ...
> },
> ...
> {noformat}
> {noformat:title=List installed services that support SSO integration only
> when Kerberos to be enabled}
> GET
> /api/v1/clusters/:CLUSTER_NAME/services?ServiceInfo/sso_integration_supported=true&ServiceInfo/sso_integration_requires_kerberos=true
> {
> "href" : ":URL",
> "items" : [
> ...
> ]
> }
> {noformat}
> {noformat:title=List stack services that support SSO integration only when
> Kerberos is enabed}
> GET
> /api/v1/stacks/:STACK_NAME/versions/:VERSION/services?StackServices/sso_integration_supported=true&StackServices/sso_integration_requires_kerberos=true
> {
> "href" : ":URL",
> "items" : [
> ...
> ]
> }{noformat}
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
