[AMBARI-9852] Kerberos: Kerberos Service Check needs to generate and destroy it's own unique identity for testing

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0
• Fix Version/s: 2.0.0
• Component/s: ambari-server
• Labels: kerberos
• Epic Link: Ambari Automated Kerberization
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 28/Feb/15 22:07
• Updated: 03/Mar/15 16:36
• Resolved: 03/Mar/15 15:38

Description

The Kerberos service check needs to generate it's own unique identity to use for testing and then destroy it when complete. This will ensure that any known identities (such as the smokeuser, usually ambari-qa) does not accidentally get removed if shared between clusters or if the service check is run after Kerberos is enabled.

The service check must perform the following steps:

1. Create a unique principal in the relevant KDC (server)
2. Test that the principal can be used to authenticate via kinit (agent)
3. Destroy the principal (server)

Issue Links

• links to: ReviewBoard