Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-13060

Kerberos: Allow user to specify additional realms for auth-to-local rules

    Details

      Description

      Allow user to specify additional realms for auth-to-local rules. This will add default rules for the specified realm(s) to the generated auth-to-local rule sets. For example:

      RULE:[1:$1@$0](.*@USER_REALM.COM)s/@.*//
      

      The value should be a (comma) delimited list of realm names set in set of global properties in the Kerberos Descriptor.

      1. AMBARI-13060_trunk_01.patch
        13 kB
        Robert Levas
      2. AMBARI-13060_branch-2.1_01.patch
        13 kB
        Robert Levas

        Issue Links

          Activity

          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Ambari-branch-2.1 #531 (See https://builds.apache.org/job/Ambari-branch-2.1/531/)
          AMBARI-13060. Kerberos: Allow user to specify additional realms for auth-to-local rules (rlevas) (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=b21cd67d66aa099cea2609a38402b8e8c37b742f)

          • ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java
          • ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
          • ambari-server/src/test/resources/stacks/HDP/2.0.8/kerberos.json
          • ambari-server/src/main/java/org/apache/ambari/server/controller/AuthToLocalBuilder.java
          • ambari-server/src/test/java/org/apache/ambari/server/api/services/AmbariMetaInfoTest.java
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/kerberos.json
          • ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/kerberos.json
          • ambari-server/src/test/java/org/apache/ambari/server/controller/AuthToLocalBuilderTest.java
          • ambari-web/app/mixins/wizard/addSecurityConfigs.js
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Ambari-branch-2.1 #531 (See https://builds.apache.org/job/Ambari-branch-2.1/531/ ) AMBARI-13060 . Kerberos: Allow user to specify additional realms for auth-to-local rules (rlevas) (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=b21cd67d66aa099cea2609a38402b8e8c37b742f ) ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java ambari-server/src/test/resources/stacks/HDP/2.0.8/kerberos.json ambari-server/src/main/java/org/apache/ambari/server/controller/AuthToLocalBuilder.java ambari-server/src/test/java/org/apache/ambari/server/api/services/AmbariMetaInfoTest.java ambari-server/src/main/resources/stacks/HDP/2.0.6/kerberos.json ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/kerberos.json ambari-server/src/test/java/org/apache/ambari/server/controller/AuthToLocalBuilderTest.java ambari-web/app/mixins/wizard/addSecurityConfigs.js
          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Ambari-trunk-Commit #3441 (See https://builds.apache.org/job/Ambari-trunk-Commit/3441/)
          AMBARI-13060. Kerberos: Allow user to specify additional realms for auth-to-local rules (rlevas) (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=9b6d33d0cb8635ca13f23b468c32bb31c30bd966)

          • ambari-server/src/test/resources/stacks/HDP/2.0.8/kerberos.json
          • ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/kerberos.json
          • ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java
          • ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
          • ambari-server/src/main/resources/stacks/HDP/2.0.6/kerberos.json
          • ambari-web/app/mixins/wizard/addSecurityConfigs.js
          • ambari-server/src/main/java/org/apache/ambari/server/controller/AuthToLocalBuilder.java
          • ambari-server/src/test/java/org/apache/ambari/server/controller/AuthToLocalBuilderTest.java
          • ambari-server/src/test/java/org/apache/ambari/server/api/services/AmbariMetaInfoTest.java
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Ambari-trunk-Commit #3441 (See https://builds.apache.org/job/Ambari-trunk-Commit/3441/ ) AMBARI-13060 . Kerberos: Allow user to specify additional realms for auth-to-local rules (rlevas) (rlevas: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=9b6d33d0cb8635ca13f23b468c32bb31c30bd966 ) ambari-server/src/test/resources/stacks/HDP/2.0.8/kerberos.json ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/kerberos.json ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelperImpl.java ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java ambari-server/src/main/resources/stacks/HDP/2.0.6/kerberos.json ambari-web/app/mixins/wizard/addSecurityConfigs.js ambari-server/src/main/java/org/apache/ambari/server/controller/AuthToLocalBuilder.java ambari-server/src/test/java/org/apache/ambari/server/controller/AuthToLocalBuilderTest.java ambari-server/src/test/java/org/apache/ambari/server/api/services/AmbariMetaInfoTest.java
          Hide
          rlevas Robert Levas added a comment -

          Committed to trunk

          commit 9b6d33d0cb8635ca13f23b468c32bb31c30bd966
          Author: Robert Levas <rlevas@hortonworks.com>
          Date:   Mon Sep 14 17:57:15 2015 -0400
          

          Committed to branch-2.1

          commit b21cd67d66aa099cea2609a38402b8e8c37b742f
          Author: Robert Levas <rlevas@hortonworks.com>
          Date:   Mon Sep 14 19:23:01 2015 -0400
          
          Show
          rlevas Robert Levas added a comment - Committed to trunk commit 9b6d33d0cb8635ca13f23b468c32bb31c30bd966 Author: Robert Levas <rlevas@hortonworks.com> Date: Mon Sep 14 17:57:15 2015 -0400 Committed to branch-2.1 commit b21cd67d66aa099cea2609a38402b8e8c37b742f Author: Robert Levas <rlevas@hortonworks.com> Date: Mon Sep 14 19:23:01 2015 -0400
          Hide
          hadoopqa Hadoop QA added a comment -

          +1 overall. Here are the results of testing the latest attachment
          http://issues.apache.org/jira/secure/attachment/12755490/AMBARI-13060_trunk_01.patch
          against trunk revision .

          +1 @author. The patch does not contain any @author tags.

          +1 tests included. The patch appears to include 4 new or modified test files.

          +1 javac. The applied patch does not increase the total number of javac compiler warnings.

          +1 release audit. The applied patch does not increase the total number of release audit warnings.

          +1 core tests. The patch passed unit tests in ambari-server.

          Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3772//testReport/
          Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3772//console

          This message is automatically generated.

          Show
          hadoopqa Hadoop QA added a comment - +1 overall . Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12755490/AMBARI-13060_trunk_01.patch against trunk revision . +1 @author . The patch does not contain any @author tags. +1 tests included . The patch appears to include 4 new or modified test files. +1 javac . The applied patch does not increase the total number of javac compiler warnings. +1 release audit . The applied patch does not increase the total number of release audit warnings. +1 core tests . The patch passed unit tests in ambari-server. Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3772//testReport/ Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3772//console This message is automatically generated.

            People

            • Assignee:
              rlevas Robert Levas
              Reporter:
              rlevas Robert Levas
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development