[AMBARI-9014] Design admin principal session expiration handling API call

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: ambari-server
• Labels: kdc_credentials kerberos
• Epic Link: Ambari Automated Kerberization
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 06/Jan/15 20:34
• Updated: 25/Feb/15 06:54
• Resolved: 13/Jan/15 18:33

Description

Provide the standard error code that will be returned along with the error message.

If administrative credentials are not available

400 Bad Request

{
  "status" : 400,
  "message" : "java.lang.IllegalArgumentException: Missing KDC administrator credentials.\nThe KDC administrator credentials must be set in session by updating the relevant Cluster resource.This may be done by issuing a PUT to the api/v1/clusters/(cluster name) API entry point with the following payload:\n{\n  \"session_attributes\" : {\n    \"kerberos_admin\" : {\"principal\" : \"(PRINCIPAL)\", \"password\" : \"(PASSWORD)\"}\n  }\n}"
}

If administrative credentials are not valid, for example, incorrect principal or password (or keytab)

400 Bad Request

{
  "status" : 400,
  "message" : "java.lang.IllegalArgumentException: Invalid KDC administrator credentials.\nThe KDC administrator credentials must be set in session by updating the relevant Cluster resource.This may be done by issuing a PUT to the api/v1/clusters/(cluster name) API entry point with the following payload:\n{\n  \"session_attributes\" : {\n    \"kerberos_admin\" : {\"principal\" : \"(PRINCIPAL)\", \"password\" : \"(PASSWORD)\"}\n  }\n}"
}

Issue Links

• is related to: AMBARI-8734 Create a more secure way to obtain and handle KDC administrator credentials
• links to: ReviewBoard