-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/47428/
-----------------------------------------------------------

(Updated May 18, 2016, 3:09 a.m.)


Review request for Ambari and Robert Levas.


Changes
-------

New patch which successfully does upgrades from 2.2.2.0 to 2.4.0.0-SNAPSHOT. 
Wouldn't have been possible without lots of great help from Robert Levas 
(thanks again!).


Bugs: AMBARI-16171
    https://issues.apache.org/jira/browse/AMBARI-16171


Repository: ambari


Description
-------

The up-coming version of Phoenix will contain some new functionality to support 
Kerberos authentication of clients via SPNEGO with the Phoenix Query Server 
(PQS).

Presently, Ambari will configure PQS to use the hbase service keytab which will 
result in the SPNEGO authentication failing as the RFC requires that the 
"primary" component of the Kerberos principal for the server is "HTTP". Thus, 
we need to ensure that we switch PQS over to use the spnego.service.keytab as 
the keytab and "HTTP/_HOST@REALM" as the principal.


Diffs (updated)
-----

  
ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java
 2e857ed 
  
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java
 41f538e 
  
ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json 
c9536f8 
  
ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java
 20fa50f 

Diff: https://reviews.apache.org/r/47428/diff/


Testing
-------

Unit testing, still working through a "real" Ambari upgrade


Thanks,

Josh Elser

Reply via email to