Uploaded image for project: 'Bigtop'
  1. Bigtop
  2. BIGTOP-931

a few improvements to secure puppet deployment code

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.5.0
    • Fix Version/s: 0.6.0
    • Component/s: deployment
    • Labels:
      None

      Description

      There's been a few annoyances that kept bugging me and I finally gave up and fixed them:

      1. test users didn't have the keytabs created for them
      2. there was a race condition between installing a service package and creating a keytab for the service
      3. Oozie wouldn't let Hue proxy the users
      4. container-executor.cfg had a default value of min.user.id which was too low for RHEL-based systems
      5. there was a race condition in configuring kadm and restarting the service
      6. the default requirement of preauth for KDC made no sense to Bigtop

        Attachments

          Activity

            People

            • Assignee:
              rvs Roman Shaposhnik
              Reporter:
              rvs Roman Shaposhnik
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: