[AMBARI-18564] Ambari should be able to create arbitrary Kerberos identities for itself as declared in the Kerberos Descriptor

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.5.0
• Fix Version/s: 2.5.0
• Component/s: ambari-server
• Labels: kerberos kerberos_descriptor
• Epic Link: Ambari authentication with Kerberos token
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 10/Oct/16 14:36
• Updated: 12/Oct/16 10:55
• Resolved: 12/Oct/16 09:03

Description

Ambari should be able to create arbitrary Kerberos identities for itself as declared in the Kerberos Descriptor.

Currently, Ambari is hard-coded to create identities for itself and SPNEGO, but that may not be good enough for all scenarios. Therefore, there needs to be an AMBARI service block in the Kerberos descriptor to allow for arbitrary identities to be defined for the Ambari server - similar to how any other service is defined in the Kerberos descriptor.

Issue Links

• links to: ReviewBoard