Hi,
Actually there is no need to do any changes to disable kerberos for ambari
server. It's only used to authenticate ambari server via SPNEGO against cluster
components and ambari views. If you disabled kerberos for the cluster, the
components stop to request SPNEGO authentication from ambari server.
But you can still disable kerberos for ambari server, just remove
"-Djava.security.auth.login.config=/etc/ambari-server/conf/krb5JAASLogin.conf
-Djava.security.krb5.conf=/etc/krb5.conf
-Djavax.security.auth.useSubjectCredsOnly=false" from AMBARI_JVM_ARGS value in
/var/lib/ambari-server/ambari-env.sh
If you decide to enable kerberos again, you have to manually revert changes in
/var/lib/ambari-server/ambari-env.sh
BR,
Dmytro Sen
________________________________
From: Fay Wang <faywang...@yahoo.com>
Sent: Tuesday, January 26, 2016 9:26 PM
To: user@ambari.apache.org
Subject: How to disable ambari-server kerberos
Hi,
I enabled kerberos for my cluster (via ambari UI) and for ambari-server
(using ambari-server setup-security). I can disable kerberos for the cluster
via Ambari UI, but am not sure how to disable kerberos for the ambari-server.
Is it ok to have kerberized abmari-server in a non-kerberized cluster? If
not, how to disable kerberos for ambari-server?
Any help is greatly appreciated!
-fay
