[AMBARI-14905] Add API directive to force toggling Kerberos if the cluster's security type has not changed

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.2.2
• Component/s: ambari-server
• Labels: kerberos rest_api
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 03/Feb/16 17:35
• Updated: 05/Feb/16 02:13
• Resolved: 04/Feb/16 21:42

Description

Add an API directive to force toggling Kerberos if the cluster's security type has not changed.

This is useful for retry attempts to enable or disable Kerberos when the workflow progressed far enough to store the new security type.

Trying to enable Kerberos when the cluster's security type is already set to KERBEROS will result in a successful response from the Ambari server but no actions will be performed. Same for attempting to disable Kerberos when the cluster's security type is already set to NONE.

By forcing the operation using the force_toggle_kerberos=true directive, the security type check is avoided, thus allowing the retry operation to proceed.

Example:

PUT /api/v1/clusters/CLUSTER_NAME?force_toggle_kerberos=true
{
  "Clusters" : {
    "security_type" : "KERBEROS"
    }
}

Issue Links

• links to: ReviewBoard