[AMBARI-15716] Kerberos: Allow multiple KDC hosts to be set while enabling Kerberos

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 2.0.0
• Fix Version/s: 2.4.0
• Component/s: ambari-server
• Labels: kdc kerberos
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 05/Apr/16 15:47
• Updated: 05/Apr/16 15:48
• Resolved: 05/Apr/16 15:48

Description

Because multiple KDCs may exist for an installation (failover, high availability, etc...), Ambari should allow a user to specify multiple KDC hosts to be set while enabling Kerberos and updating the Kerberos service's configuration.

This should be done by allowing kerberos-env/kdc_host to accept a (comma-)delimited list of hosts and then parsing that list properly when building the krb5.conf file where each kdc_host item generates an entry in the relevant realm block. For example:

kerberos-env

{
  ...
 "kdc_hosts" : "kdc1.example.com, kdc2.example.com"
  ...
}

krb5.conf

[realms]
  EXAMPLE.COM = {
    ...
    kdc = kdc1.example.com
    kdc = kdc2.example.com
    ...
  }

Issue Links

• is duplicated by: AMBARI-13240 Kerberos: Allow multiple KDC hosts to be set while enabling Kerberos