[jira] [Commented] (AMBARI-22078) The configs of HBase and Kafka issue

[zhangxiaolu (JIRA)]

[ 
https://issues.apache.org/jira/browse/AMBARI-22078?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16196393#comment-16196393
 ] 

zhangxiaolu commented on AMBARI-22078:
--

Hi [~ncole], Thank you so much for reviewing my patch on reviewboard, and could 
you be so kind as to commit the patch for me please? Thanks in advance

> The configs of HBase and Kafka issue
> 
>
> Key: AMBARI-22078
> URL: https://issues.apache.org/jira/browse/AMBARI-22078
> Project: Ambari
>  Issue Type: Improvement
>Affects Versions: trunk
> Environment: When the cluster is kerberoed, the config's group is 
> root,Maybe should be user.group be better.
>Reporter: zhangxiaolu
>Assignee: zhangxiaolu
> Fix For: trunk
>
> Attachments: AMBARI-22078.patch, screenshot-1.png, screenshot-2.png
>
>




--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

[jira] [Updated] (AMBARI-22138) When regenerating keytab files for a service, non-service-specific principals are affected

[Robert Levas (JIRA)]

 [ 
https://issues.apache.org/jira/browse/AMBARI-22138?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Levas updated AMBARI-22138:
--
Status: Patch Available  (was: Open)

> When regenerating keytab files for a service, non-service-specific principals 
> are affected
> --
>
> Key: AMBARI-22138
> URL: https://issues.apache.org/jira/browse/AMBARI-22138
> Project: Ambari
>  Issue Type: Bug
>  Components: ambari-server
>Affects Versions: 2.6.0
>Reporter: Robert Levas
>Assignee: Robert Levas
>Priority: Critical
>  Labels: kerberos
> Fix For: 3.0.0
>
> Attachments: AMBARI-22138_trunk_01.patch
>
>
> When regenerating keytab files for a service, non-service-specific principals 
> are affected. For example, when regenerating the keytab files for HDFS using 
> the following ReST API call:
> {code:title=PUT 
> /api/v1/clusters/c1?regenerate_keytabs=all_components=HDFS}
> {
>   "Clusters": {
> "security_type": "KERBEROS"
>   }
> }
> {code}
> The following principals are affected:
> * HTTP/c6402.ambari.apache@example.com
> * ambari-qa...@example.com
> * nn/c6402.ambari.apache@example.com
> * hdfs...@example.com
> * HTTP/c6403.ambari.apache@example.com
> * dn/c6403.ambari.apache@example.com
> * HTTP/c6401.ambari.apache@example.com
> * nn/c6401.ambari.apache@example.com
> * ambari-server...@example.com
> However only the following principals *should be*  affected:
> * nn/c6402.ambari.apache@example.com
> * hdfs...@example.com
> * dn/c6403.ambari.apache@example.com
> * nn/c6401.ambari.apache@example.com



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

[jira] [Updated] (AMBARI-22138) When regenerating keytab files for a service, non-service-specific principals are affected

[Robert Levas (JIRA)]

 [ 
https://issues.apache.org/jira/browse/AMBARI-22138?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Levas updated AMBARI-22138:
--
Attachment: AMBARI-22138_trunk_01.patch

> When regenerating keytab files for a service, non-service-specific principals 
> are affected
> --
>
> Key: AMBARI-22138
> URL: https://issues.apache.org/jira/browse/AMBARI-22138
> Project: Ambari
>  Issue Type: Bug
>  Components: ambari-server
>Affects Versions: 2.6.0
>Reporter: Robert Levas
>Assignee: Robert Levas
>Priority: Critical
>  Labels: kerberos
> Fix For: 3.0.0
>
> Attachments: AMBARI-22138_trunk_01.patch
>
>
> When regenerating keytab files for a service, non-service-specific principals 
> are affected. For example, when regenerating the keytab files for HDFS using 
> the following ReST API call:
> {code:title=PUT 
> /api/v1/clusters/c1?regenerate_keytabs=all_components=HDFS}
> {
>   "Clusters": {
> "security_type": "KERBEROS"
>   }
> }
> {code}
> The following principals are affected:
> * HTTP/c6402.ambari.apache@example.com
> * ambari-qa...@example.com
> * nn/c6402.ambari.apache@example.com
> * hdfs...@example.com
> * HTTP/c6403.ambari.apache@example.com
> * dn/c6403.ambari.apache@example.com
> * HTTP/c6401.ambari.apache@example.com
> * nn/c6401.ambari.apache@example.com
> * ambari-server...@example.com
> However only the following principals *should be*  affected:
> * nn/c6402.ambari.apache@example.com
> * hdfs...@example.com
> * dn/c6403.ambari.apache@example.com
> * nn/c6401.ambari.apache@example.com



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)