[AMBARI-18434] Fix upgrade configs for storm-site

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.5.0
• Component/s: ambari-server
• Assignee: Magyari Sandor Szilard
• Reporter: Magyari Sandor Szilard
• Due: 23/Sep/16
• Created: 21/Sep/16 15:56
• Updated: 26/Sep/16 15:39
• Resolved: 26/Sep/16 12:12

Description

Upgrade configs in config-upgrade.xml in hdp_2_5_0_0_add_storm_security_configs definition for HDP 2.3 & HDP 2.4 for storm-site are not correct, since there are three config properties to be set, but only one of them will be set, the first which meets the condition:

 <definition xsi:type="configure" id="hdp_2_5_0_0_add_storm_security_configs">
            <condition type="cluster-env" key="security_enabled" value="true">
              <type>storm-site</type>
              <key>nimbus.impersonation.authorizer</key>
              <value>org.apache.storm.security.auth.authorizer.ImpersonationAuthorizer</value>
            </condition>
            <condition type="cluster-env" key="security_enabled" value="true">
              <type>storm-site</type>
              <key>nimbus.impersonation.acl</key>
              <value>"{ {{storm_bare_jaas_principal}} : {hosts: ['*'], groups: ['*']}}"</value>
            </condition>
            <condition type="cluster-env" key="security_enabled" value="true">
              <type>storm-site</type>
              <key>nimbus.admins</key>
              <value>"['{{storm_bare_jaas_principal}}', '{{ambari_bare_jaas_principal}}']"</value>
            </condition>
          </definition>

Issue Links

• links to: ReviewBoard