[AMBARI-5060] Security Wizard: enable Kerberos setup for Storm

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.6.0
• Component/s: ambari-web
• Assignee: Jaimin Jetly
• Reporter: Jaimin Jetly
• Created: 12/Mar/14 21:39
• Updated: 02/Apr/14 05:49
• Resolved: 02/Apr/14 05:49

Description

1) Following jaas.conf file needs to be on all storm component hosts:
Client {
com.sun.security.auth.module.Krb5LoginModule required
useKeyTab=true
keyTab="$keytab"
storeKey=true
useTicketCache=false
serviceName="zookeeper"
principal="$principal";
};

2) In YAML, following java configurations should have jaas.conf options:
nimbus.childopts: "-Djava.security.auth.login.config=/path/to/jaas.conf"
ui.childopts: "-Djava.security.auth.login.config=/path/to/jaas.conf"
supervisor.childopts: "-Djava.security.auth.login.config=/path/to/jaas.conf"