KERBEROS.json 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372
  1. {
  2. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/stackServices/KERBEROS/configurations?fields=*",
  3. "items" : [
  4. {
  5. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/admin_server_host",
  6. "StackConfigurations" : {
  7. "final" : "false",
  8. "property_description" : "\n The IP address or FQDN of the administrative Kerberos server, optionally a port number may be\n provided\n ",
  9. "property_name" : "admin_server_host",
  10. "property_type" : [ ],
  11. "property_value" : "",
  12. "service_name" : "KERBEROS",
  13. "stack_name" : "HDP",
  14. "stack_version" : "2.2",
  15. "type" : "krb5-conf.xml"
  16. }
  17. },
  18. {
  19. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/conf_dir",
  20. "StackConfigurations" : {
  21. "final" : "false",
  22. "property_description" : "The kadm.acl configuration directory",
  23. "property_name" : "conf_dir",
  24. "property_type" : [ ],
  25. "property_value" : "/var/kerberos/krb5kdc",
  26. "service_name" : "KERBEROS",
  27. "stack_name" : "HDP",
  28. "stack_version" : "2.2",
  29. "type" : "kadm5-acl.xml"
  30. }
  31. },
  32. {
  33. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/conf_dir",
  34. "StackConfigurations" : {
  35. "final" : "false",
  36. "property_description" : "The kdc.conf configuration directory",
  37. "property_name" : "conf_dir",
  38. "property_type" : [ ],
  39. "property_value" : "/var/kerberos/krb5kdc",
  40. "service_name" : "KERBEROS",
  41. "stack_name" : "HDP",
  42. "stack_version" : "2.2",
  43. "type" : "kdc-conf.xml"
  44. }
  45. },
  46. {
  47. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/conf_dir",
  48. "StackConfigurations" : {
  49. "final" : "false",
  50. "property_description" : "The krb5.conf configuration directory",
  51. "property_name" : "conf_dir",
  52. "property_type" : [ ],
  53. "property_value" : "/etc",
  54. "service_name" : "KERBEROS",
  55. "stack_name" : "HDP",
  56. "stack_version" : "2.2",
  57. "type" : "krb5-conf.xml"
  58. }
  59. },
  60. {
  61. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/content",
  62. "StackConfigurations" : {
  63. "final" : "false",
  64. "property_description" : "The jinja template for the kadm5.acl file",
  65. "property_name" : "content",
  66. "property_type" : [ ],
  67. "property_value" : "\n */admin@{{realm}}\t*\n\n {# Append additional realm declarations should be placed below #}\n ",
  68. "service_name" : "KERBEROS",
  69. "stack_name" : "HDP",
  70. "stack_version" : "2.2",
  71. "type" : "kadm5-acl.xml"
  72. }
  73. },
  74. {
  75. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/content",
  76. "StackConfigurations" : {
  77. "final" : "false",
  78. "property_description" : "The jinja template for the kdc.conf file",
  79. "property_name" : "content",
  80. "property_type" : [ ],
  81. "property_value" : "\n [kdcdefaults]\n kdc_ports = {{kdcdefaults_kdc_ports}}\n kdc_tcp_ports = {{kdcdefaults_kdc_tcp_ports}}\n\n [realms]\n {{realm}} = {\n acl_file = {{kadm5_acl_path}}\n dict_file = /usr/share/dict/words\n admin_keytab = {{kadm5_acl_dir}}/kadm5.keytab\n supported_enctypes = {{libdefaults_default_tgs_enctypes}}\n }\n\n {# Append additional realm declarations should be placed below #}\n ",
  82. "service_name" : "KERBEROS",
  83. "stack_name" : "HDP",
  84. "stack_version" : "2.2",
  85. "type" : "kdc-conf.xml"
  86. }
  87. },
  88. {
  89. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/content",
  90. "StackConfigurations" : {
  91. "final" : "false",
  92. "property_description" : "The jinja template for the krb5.conf file",
  93. "property_name" : "content",
  94. "property_type" : [ ],
  95. "property_value" : "\n[libdefaults]\n renew_lifetime = {{libdefaults_renew_lifetime}}\n forwardable = {{libdefaults_forwardable}}\n default_realm = {{realm|upper()}}\n ticket_lifetime = {{libdefaults_ticket_lifetime}}\n dns_lookup_realm = {{libdefaults_dns_lookup_realm}}\n dns_lookup_kdc = {{libdefaults_dns_lookup_kdc}}\n\n{% if domains %}\n[domain_realm]\n{% for domain in domains %}\n {{domain}} = {{realm|upper()}}\n{% endfor %}\n{% endif %}\n\n[logging]\n default = {{logging_default}}\n{#\n# The following options are unused unless a managed KDC is installed\n admin_server = {{logging_admin_server}}\n kdc = {{logging_admin_kdc}}\n#}\n\n[realms]\n {{realm}} = {\n admin_server = {{admin_server_host|default(kdc_host, True)}}\n kdc = {{kdc_host}}\n }\n\n{# Append additional realm declarations should be placed below #}\n ",
  96. "service_name" : "KERBEROS",
  97. "stack_name" : "HDP",
  98. "stack_version" : "2.2",
  99. "type" : "krb5-conf.xml"
  100. }
  101. },
  102. {
  103. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/domains",
  104. "StackConfigurations" : {
  105. "final" : "false",
  106. "property_description" : "\n A comma-delimited list of domain names that the realm serves (optional)\n ",
  107. "property_name" : "domains",
  108. "property_type" : [ ],
  109. "property_value" : "",
  110. "service_name" : "KERBEROS",
  111. "stack_name" : "HDP",
  112. "stack_version" : "2.2",
  113. "type" : "krb5-conf.xml"
  114. }
  115. },
  116. {
  117. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/kdc_host",
  118. "StackConfigurations" : {
  119. "final" : "false",
  120. "property_description" : "\n The IP address or FQDN of the KDC or Active Directory server, optionally a port number may be\n provided\n ",
  121. "property_name" : "kdc_host",
  122. "property_type" : [ ],
  123. "property_value" : "",
  124. "service_name" : "KERBEROS",
  125. "stack_name" : "HDP",
  126. "stack_version" : "2.2",
  127. "type" : "krb5-conf.xml"
  128. }
  129. },
  130. {
  131. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/kdc_type",
  132. "StackConfigurations" : {
  133. "final" : "false",
  134. "property_description" : "\n The type of KDC being used. Either mit-kdc or active-directory\n ",
  135. "property_name" : "kdc_type",
  136. "property_type" : [ ],
  137. "property_value" : "mit-kdc",
  138. "service_name" : "KERBEROS",
  139. "stack_name" : "HDP",
  140. "stack_version" : "2.2",
  141. "type" : "krb5-conf.xml"
  142. }
  143. },
  144. {
  145. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/kdcdefaults_kdc_ports",
  146. "StackConfigurations" : {
  147. "final" : "false",
  148. "property_description" : null,
  149. "property_name" : "kdcdefaults_kdc_ports",
  150. "property_type" : [ ],
  151. "property_value" : "88",
  152. "service_name" : "KERBEROS",
  153. "stack_name" : "HDP",
  154. "stack_version" : "2.2",
  155. "type" : "kdc-conf.xml"
  156. }
  157. },
  158. {
  159. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/kdcdefaults_kdc_tcp_ports",
  160. "StackConfigurations" : {
  161. "final" : "false",
  162. "property_description" : null,
  163. "property_name" : "kdcdefaults_kdc_tcp_ports",
  164. "property_type" : [ ],
  165. "property_value" : "88",
  166. "service_name" : "KERBEROS",
  167. "stack_name" : "HDP",
  168. "stack_version" : "2.2",
  169. "type" : "kdc-conf.xml"
  170. }
  171. },
  172. {
  173. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/libdefaults_default_tgs_enctypes",
  174. "StackConfigurations" : {
  175. "final" : "false",
  176. "property_description" : "\n a space-delimited list of session key encryption types supported by the KDC or Active\n Directory\n ",
  177. "property_name" : "libdefaults_default_tgs_enctypes",
  178. "property_type" : [ ],
  179. "property_value" : "\n aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 des3-cbc-sha1 arcfour-hmac-md5\n camellia256-cts-cmac camellia128-cts-cmac des-cbc-crc des-cbc-md5 des-cbc-md4\n ",
  180. "service_name" : "KERBEROS",
  181. "stack_name" : "HDP",
  182. "stack_version" : "2.2",
  183. "type" : "krb5-conf.xml"
  184. }
  185. },
  186. {
  187. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/libdefaults_default_tkt_enctypes",
  188. "StackConfigurations" : {
  189. "final" : "false",
  190. "property_description" : "\n a space-delimited list of session key encryption types supported by the KDC or Active\n Directory\n ",
  191. "property_name" : "libdefaults_default_tkt_enctypes",
  192. "property_type" : [ ],
  193. "property_value" : "\n aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 des3-cbc-sha1 arcfour-hmac-md5\n camellia256-cts-cmac camellia128-cts-cmac des-cbc-crc des-cbc-md5 des-cbc-md4\n ",
  194. "service_name" : "KERBEROS",
  195. "stack_name" : "HDP",
  196. "stack_version" : "2.2",
  197. "type" : "krb5-conf.xml"
  198. }
  199. },
  200. {
  201. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/libdefaults_dns_lookup_kdc",
  202. "StackConfigurations" : {
  203. "final" : "false",
  204. "property_description" : null,
  205. "property_name" : "libdefaults_dns_lookup_kdc",
  206. "property_type" : [ ],
  207. "property_value" : "false",
  208. "service_name" : "KERBEROS",
  209. "stack_name" : "HDP",
  210. "stack_version" : "2.2",
  211. "type" : "krb5-conf.xml"
  212. }
  213. },
  214. {
  215. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/libdefaults_dns_lookup_realm",
  216. "StackConfigurations" : {
  217. "final" : "false",
  218. "property_description" : null,
  219. "property_name" : "libdefaults_dns_lookup_realm",
  220. "property_type" : [ ],
  221. "property_value" : "false",
  222. "service_name" : "KERBEROS",
  223. "stack_name" : "HDP",
  224. "stack_version" : "2.2",
  225. "type" : "krb5-conf.xml"
  226. }
  227. },
  228. {
  229. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/libdefaults_forwardable",
  230. "StackConfigurations" : {
  231. "final" : "false",
  232. "property_description" : null,
  233. "property_name" : "libdefaults_forwardable",
  234. "property_type" : [ ],
  235. "property_value" : "true",
  236. "service_name" : "KERBEROS",
  237. "stack_name" : "HDP",
  238. "stack_version" : "2.2",
  239. "type" : "krb5-conf.xml"
  240. }
  241. },
  242. {
  243. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/libdefaults_renew_lifetime",
  244. "StackConfigurations" : {
  245. "final" : "false",
  246. "property_description" : null,
  247. "property_name" : "libdefaults_renew_lifetime",
  248. "property_type" : [ ],
  249. "property_value" : "7d",
  250. "service_name" : "KERBEROS",
  251. "stack_name" : "HDP",
  252. "stack_version" : "2.2",
  253. "type" : "krb5-conf.xml"
  254. }
  255. },
  256. {
  257. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/libdefaults_ticket_lifetime",
  258. "StackConfigurations" : {
  259. "final" : "false",
  260. "property_description" : null,
  261. "property_name" : "libdefaults_ticket_lifetime",
  262. "property_type" : [ ],
  263. "property_value" : "24h",
  264. "service_name" : "KERBEROS",
  265. "stack_name" : "HDP",
  266. "stack_version" : "2.2",
  267. "type" : "krb5-conf.xml"
  268. }
  269. },
  270. {
  271. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/logging_admin_server",
  272. "StackConfigurations" : {
  273. "final" : "false",
  274. "property_description" : null,
  275. "property_name" : "logging_admin_server",
  276. "property_type" : [ ],
  277. "property_value" : "FILE:/var/log/kadmind.log",
  278. "service_name" : "KERBEROS",
  279. "stack_name" : "HDP",
  280. "stack_version" : "2.2",
  281. "type" : "krb5-conf.xml"
  282. }
  283. },
  284. {
  285. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/logging_default",
  286. "StackConfigurations" : {
  287. "final" : "false",
  288. "property_description" : null,
  289. "property_name" : "logging_default",
  290. "property_type" : [ ],
  291. "property_value" : "FILE:/var/log/krb5libs.log",
  292. "service_name" : "KERBEROS",
  293. "stack_name" : "HDP",
  294. "stack_version" : "2.2",
  295. "type" : "krb5-conf.xml"
  296. }
  297. },
  298. {
  299. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/logging_kdc",
  300. "StackConfigurations" : {
  301. "final" : "false",
  302. "property_description" : null,
  303. "property_name" : "logging_kdc",
  304. "property_type" : [ ],
  305. "property_value" : "FILE:/var/log/krb5kdc.log",
  306. "service_name" : "KERBEROS",
  307. "stack_name" : "HDP",
  308. "stack_version" : "2.2",
  309. "type" : "krb5-conf.xml"
  310. }
  311. },
  312. {
  313. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/realm",
  314. "StackConfigurations" : {
  315. "final" : "false",
  316. "property_description" : "\n The realm to use when creating service principals\n ",
  317. "property_name" : "realm",
  318. "property_type" : [ ],
  319. "property_value" : "",
  320. "service_name" : "KERBEROS",
  321. "stack_name" : "HDP",
  322. "stack_version" : "2.2",
  323. "type" : "krb5-conf.xml"
  324. }
  325. },
  326. {
  327. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/test_keytab",
  328. "StackConfigurations" : {
  329. "final" : "false",
  330. "property_description" : "\n The base64-encoded keytab for the test principal (either this value or the password\n value is required to be set, neither is expected to be retained)\n ",
  331. "property_name" : "test_keytab",
  332. "property_type" : [ ],
  333. "property_value" : "\n\n ",
  334. "service_name" : "KERBEROS",
  335. "stack_name" : "HDP",
  336. "stack_version" : "2.2",
  337. "type" : "krb5-conf.xml"
  338. }
  339. },
  340. {
  341. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/test_password",
  342. "StackConfigurations" : {
  343. "final" : "false",
  344. "property_description" : "\n The password for the administrative principal (either this value or the keytab value is\n required to be set, neither is expected to be retained)\n ",
  345. "property_name" : "test_password",
  346. "property_type" : [
  347. "PASSWORD"
  348. ],
  349. "property_value" : "",
  350. "service_name" : "KERBEROS",
  351. "stack_name" : "HDP",
  352. "stack_version" : "2.2",
  353. "type" : "krb5-conf.xml"
  354. }
  355. },
  356. {
  357. "href" : "http://c6403.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.2/services/KERBEROS/configurations/test_principal",
  358. "StackConfigurations" : {
  359. "final" : "false",
  360. "property_description" : "\n The principal that may be used to test the Kerberos configuration (this will not be retained)\n ",
  361. "property_name" : "test_principal",
  362. "property_type" : [ ],
  363. "property_value" : "",
  364. "service_name" : "KERBEROS",
  365. "stack_name" : "HDP",
  366. "stack_version" : "2.2",
  367. "type" : "krb5-conf.xml"
  368. }
  369. }
  370. ]
  371. }