AMBARI-14053. PXF should get secured when security is enabled on cluster via kerberos wizard on ambari (Bhuvnesh Chaudhary via odiachenko).

ambari-server/src/main/resources/common-services/PXF/3.0.0/kerberos.json

@@ -0,0 +1,35 @@
+{
+    "services": [
+        {
+            "components": [
+                {
+                    "identities": [
+                        {
+                            "keytab": {
+                                "configuration": null,
+                                "file": "${keytab_dir}/pxf.service.keytab",
+                                "group": {
+                                    "access": "",
+                                    "name": "${cluster-env/user_group}"
+                                },
+                                "owner": {
+                                    "access": "r",
+                                    "name": "pxf"
+                                }
+                            },
+                            "name": "pxf_client_pxf",
+                            "principal": {
+                                "configuration": null,
+                                "local_username": null,
+                                "type": "service",
+                                "value": "pxf/_HOST@${realm}"
+                            }
+                        }
+                    ],
+                    "name": "PXF"
+                }
+            ],
+            "name": "PXF"
+        }
+    ]
+}

ambari-server/src/main/resources/common-services/PXF/3.0.0/package/scripts/params.py

@@ -40,3 +40,7 @@ java_home = config["hostLevelParams"]["java_home"] if "java_home" in config["hos
 
 # Timeouts
 default_exec_timeout = 600
+
+# security related
+security_enabled = config['configurations']['cluster-env']['security_enabled']
+realm_name = config['configurations']['kerberos-env']['realm']

ambari-server/src/main/resources/common-services/PXF/3.0.0/package/scripts/pxf.py

@@ -21,6 +21,7 @@ limitations under the License.
 from resource_management import Script
 
 from resource_management.libraries.resources.xml_config import XmlConfig
+from resource_management.libraries.script.config_dictionary import ConfigDictionary
 from resource_management.core.resources.accounts import User
 from resource_management.core.resources.system import Directory, File, Execute
 from resource_management.core.source import Template
@@ -99,9 +100,16 @@ class Pxf(Script):
       shutil.copy2("{0}/pxf-privatehdp.classpath".format(params.pxf_conf_dir),
                    "{0}/pxf-private.classpath".format(params.pxf_conf_dir))
 
+    if params.security_enabled:
+      pxf_site_dict = dict(params.config['configurations']['pxf-site'])
+      pxf_site_dict['pxf.service.kerberos.principal'] = "{0}/_HOST@{1}".format(params.pxf_user, params.realm_name)
+      pxf_site = ConfigDictionary(pxf_site_dict)
+    else:
+      pxf_site = params.config['configurations']['pxf-site']
+
     XmlConfig("pxf-site.xml",
               conf_dir=params.pxf_conf_dir,
-              configurations=params.config['configurations']['pxf-site'],
+              configurations=pxf_site,
               configuration_attributes=params.config['configuration_attributes']['pxf-site'])