[AMBARI-12137] Kerberos: storm headless princ + keytab seem incorrect

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.1.0
• Component/s: ambari-server
• Labels: kerberos kerberos_descriptor
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 24/Jun/15 21:54
• Updated: 25/Jun/15 20:26
• Resolved: 25/Jun/15 17:30

Description

• The storm user principals should be derived using the storm user + cluster name:

  storm-${cluster_name}@${realm}
  

• The keytab name should be consistent with other headless identities:

  storm.headless.keytab
  

Solution
Update Storm's Kerberos descriptor to fix the relevant identitiy

Issue Links

• links to: ReviewBoard