[AMBARI-12343] Ambari storm deployment fails in secure mode due to storm principal name

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.1.0
• Fix Version/s: 2.1.1
• Component/s: ambari-server
• Assignee: Robert Levas
• Reporter: Harsha
• Created: 08/Jul/15 21:25
• Updated: 14/Jul/15 15:56
• Resolved: 09/Jul/15 15:30

Description

Storm cannot dynamically translate Kerberos principal names to local account ids using common auth-to-local rules. It can only strip the realm portion of the principal and use that value as the local user id. Because of this, automatically adding the cluster name to the principal name of the Storm user Kerberos Identity will lead to issues for Storm. Therefore the default behavior for generating the Storm user's Kerberos should be to use the storm-env/storm_user value.

Issue Links

• links to: ReviewBoard