Kaynağa Gözat

AMBARI-18859. Keytab files where the owner is not explicitly set should be owned by the user executing ambari-agent.(vbrodetskyi)

Vitaly Brodetskyi 8 yıl önce
ebeveyn
işleme
f1c0c6ade9

+ 3 - 0
ambari-server/src/main/resources/common-services/KERBEROS/1.10.3-10/package/scripts/kerberos_common.py

@@ -18,6 +18,7 @@ limitations under the License.
 """
 
 import base64
+import getpass
 import os
 import string
 import subprocess
@@ -379,6 +380,8 @@ class KerberosScript(Script):
               Directory(head, create_parents = True, mode=0755, owner="root", group="root")
 
             owner = get_property_value(item, 'keytab_file_owner_name')
+            if not owner:
+              owner = getpass.getuser()
             owner_access = get_property_value(item, 'keytab_file_owner_access')
             group = get_property_value(item, 'keytab_file_group_name')
             group_access = get_property_value(item, 'keytab_file_group_access')