[AMBARI-12337] Kerberos: LDAP error updating and removing service principals in AD

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.1.0
• Component/s: ambari-server
• Labels: active_directory kerberos
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 08/Jul/15 18:10
• Updated: 09/Jul/15 02:48
• Resolved: 09/Jul/15 01:01

Description

An LDAP error occurs while updating and removing service principals in clusters with Kerberos enabled using Active Directory.

The following exception is thrown when removing an account:

javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-0310081B, problem 5012 (DIR_ERROR), data 0
]
noformat}

The following exception is thrown when updating an account's password

javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-0310081B, problem 5012 (DIR_ERROR), data 0
^@]

Issue Links

• links to: ReviewBoard