Parcourir la source

AMBARI-11001. Ambari uses users' interactive ticket cache (rlevas)

Robert Levas il y a 10 ans
Parent
commit
eaaef9a1f6

+ 4 - 7
ambari-server/conf/unix/krb5JAASLogin.conf

@@ -1,13 +1,10 @@
-com.sun.security.jgss.initiate {
-    com.sun.security.auth.module.Krb5LoginModule required 
-    renewTGT=true
+com.sun.security.jgss.krb5.initiate {
+    com.sun.security.auth.module.Krb5LoginModule required
+    renewTGT=false
     doNotPrompt=true
     useKeyTab=true
     keyTab="/etc/security/keytabs/ambari.keytab"
     principal="ambari@EXAMPLE.COM"
-    isInitiator=true
     storeKey=true
-    useTicketCache=true
-    client=true; 
+    useTicketCache=false;
 };
-

+ 3 - 5
ambari-server/conf/windows/krb5JAASLogin.conf

@@ -1,12 +1,10 @@
-com.sun.security.jgss.initiate {
+com.sun.security.jgss.krb5.initiate {
     com.sun.security.auth.module.Krb5LoginModule required
-    renewTGT=true
+    renewTGT=false
     doNotPrompt=true
     useKeyTab=true
     keyTab="etc\\security\\keytabs\\ambari.keytab"
     principal="ambari@EXAMPLE.COM"
-    isInitiator=true
     storeKey=true
-    useTicketCache=true
-    client=true;
+    useTicketCache=false;
 };