[
https://issues.apache.org/jira/browse/AMBARI-24528?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sean Roberts updated AMBARI-24528:
----------------------------------
Description:
The 'Admin -> Kerberos -> "Additonal Realms"' configuration:
* Currently requires keytab re-generation. *But it is completely unrelated to
keytabs* and should be able to change it without restarting the entire cluster.
Fix:
* Move "Additional Realms" to the "Kerberos" service configs where it belongs,
along with the "auth_to_local" setting which is what it is used for.
was:
The 'Admin -> Kerberos -> "Additonal Realms"' configuration:
* Currently requires a keytab re-generation. *But it is completely unrelated to
keytabs* and should be able to change it without restarting the entire cluster.
Fix:
* Move "Additional Realms" to the "Kerberos" service configs where it belongs,
along with the "auth_to_local" setting which is what it is used for.
> Kerberos "Additional Realms" does not require keytab re-generation
> ------------------------------------------------------------------
>
> Key: AMBARI-24528
> URL: https://issues.apache.org/jira/browse/AMBARI-24528
> Project: Ambari
> Issue Type: Bug
> Components: ambari-admin, security
> Affects Versions: 2.5.0, 2.6.0
> Reporter: Sean Roberts
> Priority: Major
> Labels: auth_to_local, kerberos
>
> The 'Admin -> Kerberos -> "Additonal Realms"' configuration:
> * Currently requires keytab re-generation. *But it is completely unrelated to
> keytabs* and should be able to change it without restarting the entire
> cluster.
> Fix:
> * Move "Additional Realms" to the "Kerberos" service configs where it
> belongs, along with the "auth_to_local" setting which is what it is used for.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
