[AMBARI-22824] Yarn/MR2 should handle a customized Zookeeper service principal name

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.7.0
• Component/s: ambari-server
• Labels: kerberos pull-request-available
• Assignee: Sandor Molnar
• Reporter: Sandor Molnar
• Created: 22/Jan/18 09:55
• Updated: 29/Jan/18 23:39
• Resolved: 29/Jan/18 11:50

Description

Yarn and MapReduce2 should handle a customized Zookeeper service principal name.

Currently this is not supported due to hardcoded and implicit values expecting the Zookeeper service principal name to be zookeeper/_HOST as opposed to something like zookeeper-mycluster/_HOST.

The following changes need to be made:

• common-services/YARN/2.1.0.2.0/package/scripts/params_linux.py must be changed to not hardcode the Zookeeper principal name in

  m_security_opts = format('-Dzookeeper.sasl.client=true -Dzookeeper.sasl.client.username=zookeeper -Djava.security.auth.login.config={yarn_jaas_file} -Dzookeeper.sasl.clientconfig=Client')
  

• -Dzookeeper.sasl.client.username=<ZOOKEEPER_PRINCPAL_NAME> should be added to YARN_OPTS

Issue Links

• links to: GitHub Pull Request #197