[AMBARI-24879] The kadmin service principal name should be configurable for MIT KDC interactions

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.0
• Fix Version/s: 2.8.0
• Component/s: ambari-server
• Labels: pull-request-available
• Assignee: Sandor Molnar
• Reporter: Sandor Molnar
• Created: 12/Nov/18 15:14
• Updated: 06/Jun/19 13:39
• Resolved: 16/Nov/18 09:56

Description

The kadmin service principal name should be configurable for MIT KDC interactions. The current process assumes the kadmin service principal is kadmin/FQDN_KADMIN_HOST, but this could be different on some installations. For example, kadmin/admin.

A new kerberos-env property should be added to allow a user to change the kadmin principal name - kerberos-env/kadmin_principal_name

The default value for the new property should be "kadmin/${admin_server_host|stripPort()}".  To be able to do this, we have to create a new variable replacement function. For example, stripPort.

Issue Links

• causes: AMBARI-25295 Ambari Server Error on submitting EU
• links to: GitHub Pull Request #2593
• links to: GitHub Pull Request #2788