question Re: MIT principal and keytab management via Amabari 2.1.2 in Support Questions

MIT principal and keytab management via Amabari 2.1.2

kkane — Wed, 02 Dec 2015 06:23:49 GMT

Can I use Ambari 2.1.2 (API or other) to manage principals and keytab deployments for non-ambari controlled services?

Re: MIT principal and keytab management via Amabari 2.1.2

andrewg — Wed, 02 Dec 2015 06:26:41 GMT

No, this is not supported.

Re: MIT principal and keytab management via Amabari 2.1.2

nsabharwal — Wed, 02 Dec 2015 06:37:28 GMT

@Paul Codding @jeff

Re: MIT principal and keytab management via Amabari 2.1.2

bsaini — Fri, 04 Dec 2015 04:53:20 GMT

Ambari can only manage the principals and keytabs for the services managed by it. The pricipal and keytabs are actually provided as part of the configuration files with the stack definition.

For e.g. for Storm, looking at the stack , you can see -

....

          "name": "storm_components",
          "principal": {
            "value": "${storm-env/storm_user}-${cluster_name}@${realm}",
            "type": "user",
            "configuration": "storm-env/storm_principal_name"
          },
          "keytab": {
            "file": "${keytab_dir}/storm.headless.keytab",
            "owner": {
              "name": "${storm-env/storm_user}",
              "access": "r"
            },
....

Ambari does not support managing principals and keytabs of other components that are outside its purview.