[AMBARI-11882] Kerberos: Oozie auth rules do not look correct

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.1.0
• Component/s: ambari-server
• Labels: kerberos
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 12/Jun/15 13:25
• Updated: 12/Jun/15 19:45
• Resolved: 12/Jun/15 16:49

Description

Due to the fact that the oozie.authentication.kerberos.name.rules are auto-generated the following rules should be removed from oozie-site.xml from all the stack configurations:

oozie-site.xml

RULE:[2:$1@$0]([jt]t@.TODO-KERBEROS-DOMAIN)s/./TODO-MAPREDUSER/
RULE:[2:$1@$0]([nd]n@.TODO-KERBEROS-DOMAIN)s/./TODO-HDFSUSER/
RULE:[2:$1@$0](hm@.TODO-KERBEROS-DOMAIN)s/./TODO-HBASE-USER/
RULE:[2:$1@$0](rs@.TODO-KERBEROS-DOMAIN)s/./TODO-HBASE-USER/
DEFAULT

Note: this is an update for AMBARI-11179 to fix older stacks.

Issue Links

• is related to: AMBARI-11179 Kerberos: Oozie auth rules do not look correct
• links to: ReviewBoard