[ https://issues.apache.org/jira/browse/AMBARI-24528?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sean Roberts updated AMBARI-24528: ---------------------------------- Description: The 'Admin -> Kerberos -> "Additonal Realms"' configuration: * Currently requires keytab re-generation. *But it is completely unrelated to keytabs* and should be able to change it without restarting the entire cluster. Fix: * Move "Additional Realms" to the "Kerberos" service configs where it belongs, along with the "auth_to_local" setting which is what it is used for. was: The 'Admin -> Kerberos -> "Additonal Realms"' configuration: * Currently requires a keytab re-generation. *But it is completely unrelated to keytabs* and should be able to change it without restarting the entire cluster. Fix: * Move "Additional Realms" to the "Kerberos" service configs where it belongs, along with the "auth_to_local" setting which is what it is used for. > Kerberos "Additional Realms" does not require keytab re-generation > ------------------------------------------------------------------ > > Key: AMBARI-24528 > URL: https://issues.apache.org/jira/browse/AMBARI-24528 > Project: Ambari > Issue Type: Bug > Components: ambari-admin, security > Affects Versions: 2.5.0, 2.6.0 > Reporter: Sean Roberts > Priority: Major > Labels: auth_to_local, kerberos > > The 'Admin -> Kerberos -> "Additonal Realms"' configuration: > * Currently requires keytab re-generation. *But it is completely unrelated to > keytabs* and should be able to change it without restarting the entire > cluster. > Fix: > * Move "Additional Realms" to the "Kerberos" service configs where it > belongs, along with the "auth_to_local" setting which is what it is used for. -- This message was sent by Atlassian JIRA (v7.6.3#76005)