[BIGTOP-931] a few improvements to secure puppet deployment code

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.5.0
• Fix Version/s: 0.6.0
• Component/s: deployment
• Assignee: Roman Shaposhnik
• Reporter: Roman Shaposhnik
• Created: 18/Apr/13 00:31
• Updated: 21/Jun/13 23:49
• Resolved: 18/Apr/13 15:39

Description

There's been a few annoyances that kept bugging me and I finally gave up and fixed them:

1. test users didn't have the keytabs created for them
2. there was a race condition between installing a service package and creating a keytab for the service
3. Oozie wouldn't let Hue proxy the users
4. container-executor.cfg had a default value of min.user.id which was too low for RHEL-based systems
5. there was a race condition in configuring kadm and restarting the service
6. the default requirement of preauth for KDC made no sense to Bigtop