-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/47428/
-----------------------------------------------------------

(Updated May 27, 2016, 10:42 p.m.)


Review request for Ambari, Jonathan Hurley, Nate Cole, Robert Levas, and 
Srimanth Gunturi.


Bugs: AMBARI-16171
    https://issues.apache.org/jira/browse/AMBARI-16171


Repository: ambari


Description
-------

The up-coming version of Phoenix will contain some new functionality to support 
Kerberos authentication of clients via SPNEGO with the Phoenix Query Server 
(PQS).

Presently, Ambari will configure PQS to use the hbase service keytab which will 
result in the SPNEGO authentication failing as the RFC requires that the 
"primary" component of the Kerberos principal for the server is "HTTP". Thus, 
we need to ensure that we switch PQS over to use the spnego.service.keytab as 
the keytab and "HTTP/_HOST@REALM" as the principal.


Diffs
-----

  
ambari-server/src/main/java/org/apache/ambari/server/upgrade/AbstractUpgradeCatalog.java
 2e857ed 
  
ambari-server/src/main/java/org/apache/ambari/server/upgrade/UpgradeCatalog240.java
 0deba5d 
  
ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json 
c9536f8 
  ambari-server/src/main/resources/stacks/HDP/2.0.6/services/stack_advisor.py 
6e506a0 
  ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py 
8c5351f 
  
ambari-server/src/test/java/org/apache/ambari/server/upgrade/UpgradeCatalog240Test.java
 4dedc98 
  ambari-server/src/test/python/stacks/2.5/common/test_stack_advisor.py 0066e1d 

Diff: https://reviews.apache.org/r/47428/diff/


Testing (updated)
-------

Unit testing, verified installation with trunk and proper kerberization.


Thanks,

Josh Elser

Reply via email to