-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/46500/
-----------------------------------------------------------
Review request for Ambari, Jonathan Hurley, Nate Cole, Oliver Szabo, Srimanth
Gunturi, and Sid Wagle.
Bugs: AMBARI-16009
https://issues.apache.org/jira/browse/AMBARI-16009
Repository: ambari
Description
-------
We had a 1600 unsecured cluster initially, from which 700 nodes were destroyed.
Though Ambari-server knew of 1600 hosts, only 900 were heartbeating. At this
point we secured the cluster and everything was good. Then we brought back the
700 hosts, which started heartbeating with ambari-server.
At this point we did 'Regenerate Keytabs' which failed at the 'Create
Principals' step (image attached), as it was trying to re-create principal
which is already existing with kadmin, and with ambari-server.
#Create Principals
Stderr:
```
2016-04-21 01:28:52,985 - Failed to create or update principal,
HTTP/[email protected] - Failed to create service principal for
HTTP/[email protected]
STDOUT: Authenticating as principal admin/admin with password.
STDERR: WARNING: no policy specified for HTTP/[email protected];
defaulting to no policy
add_principal: Principal or policy already exists while creating
"HTTP/[email protected]".
{noformat}
Stdout:
{noformat}
2016-04-21 01:27:32,400 - Processing identities...
2016-04-21 01:28:29,874 - Processing principal,
HTTP/[email protected]
```
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/serveraction/kerberos/MITKerberosOperationHandler.java
f48052f
ambari-server/src/test/java/org/apache/ambari/server/serveraction/kerberos/MITKerberosOperationHandlerTest.java
d15db17
Diff: https://reviews.apache.org/r/46500/diff/
Testing
-------
Manually tested enabling Kerberos and Regenerating Keytabs both having
unexpected principals in or removed from the KDC as needed to attempt to
generate the issue.
#Local test results:
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 1:19:08.563s
[INFO] Finished at: Thu Apr 21 12:45:33 EDT 2016
[INFO] Final Memory: 60M/1866M
[INFO] ------------------------------------------------------------------------
# Jenkins test results: PENDING
Thanks,
Robert Levas
