[AMBARI-22719] Regenerate Keytabs resets security.inter.broker.protocol to PLAINTEXTSASL

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.6.1
• Fix Version/s: 3.0.0, 2.6.2
• Component/s: stacks
• Assignee: Attila Doroszlai
• Reporter: Attila Doroszlai
• Created: 03/Jan/18 10:11
• Updated: 04/Jan/18 12:39
• Resolved: 04/Jan/18 12:00

Description

STR:

1. Install Ambari 2.6.1
2. Deploy secure cluster (ZooKeeper + Kafka)
3. Set security.inter.broker.protocol to SASL_PLAINTEXT (or SASL_SSL)
4. Remove security.inter.broker.protocol from cluster Kerberos descriptor or update it to SASL_PLAINTEXT (or SASL_SSL)
   (steps)
5. Regenerate Keytabs

Result: security.inter.broker.protocol is reset to PLAINTEXTSASL

This is caused by stack advisor forcing PLAINTEXTSASL for secure cluster, although SASL_PLAINTEXT (or SASL_SSL) is also valid.

Issue Links

• links to: Review request