[AMBARI-12501] Kerberos: Allow setting/clearing attributes for MIT KDC identities

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.0, 2.0.1, 2.1.0
• Fix Version/s: 2.1.1
• Component/s: ambari-server
• Labels: kdc kerberos
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 22/Jul/15 13:30
• Updated: 24/Jul/15 15:19
• Resolved: 24/Jul/15 12:51

Description

Allow for attributes to be set (or unset) for identities created in an MIT (or similar) KDC.

A user should be able to specify a list of attributes to be set or unset while creating identities using the MIT kadmin utility. For example:

-requires_preauth max_renew_life=7d

Solution
Add a property in kerberos-env or reuse kerberos-env/create_attributes_template to store the user-specified attributes.

Issue Links

• links to: ReviewBoard