浏览代码

AMBARI-11001. Ambari uses users' interactive ticket cache (rlevas)

Robert Levas 10 年之前
父节点
当前提交
eaaef9a1f6
共有 2 个文件被更改,包括 7 次插入12 次删除
  1. 4 7
      ambari-server/conf/unix/krb5JAASLogin.conf
  2. 3 5
      ambari-server/conf/windows/krb5JAASLogin.conf

+ 4 - 7
ambari-server/conf/unix/krb5JAASLogin.conf

@@ -1,13 +1,10 @@
-com.sun.security.jgss.initiate {
-    com.sun.security.auth.module.Krb5LoginModule required 
-    renewTGT=true
+com.sun.security.jgss.krb5.initiate {
+    com.sun.security.auth.module.Krb5LoginModule required
+    renewTGT=false
     doNotPrompt=true
     useKeyTab=true
     keyTab="/etc/security/keytabs/ambari.keytab"
     principal="ambari@EXAMPLE.COM"
-    isInitiator=true
     storeKey=true
-    useTicketCache=true
-    client=true; 
+    useTicketCache=false;
 };
-

+ 3 - 5
ambari-server/conf/windows/krb5JAASLogin.conf

@@ -1,12 +1,10 @@
-com.sun.security.jgss.initiate {
+com.sun.security.jgss.krb5.initiate {
     com.sun.security.auth.module.Krb5LoginModule required
-    renewTGT=true
+    renewTGT=false
     doNotPrompt=true
     useKeyTab=true
     keyTab="etc\\security\\keytabs\\ambari.keytab"
     principal="ambari@EXAMPLE.COM"
-    isInitiator=true
     storeKey=true
-    useTicketCache=true
-    client=true;
+    useTicketCache=false;
 };