[AMBARI-10709] Kerberos automation via generated scripts

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: security
• Flags: Important
• Assignee: Unassigned
• Reporter: Laser
• Created: 23/Apr/15 19:18
• Updated: 30/Apr/15 00:07

Description

Currently Amabari project does not provide a way for very security conscious clients to get editable scripts to be run on their system .

In a real world scenario with enterprise level customers, there will be no way that these customers will let the Ambari wizard run anything on the organization LDAP server .

What we suggest to contribute is a framework which is based on "IBM''s kerberos automation toolkit for hadoop ", more details can be found here :
https://developer.ibm.com/hadoop/blog/2014/12/11/ibms-kerberos-automation-toolkit-hadoop/

This toolkit supports building scripts and other resources for both "openLDAP" and "Active Directory" in order to ease up the configuration of kerberos on hadoop enviornments for security concious clients . these scripts and artifacts are created based on the clients topology . and have been tested at various client sites.