Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-10709

Kerberos automation via generated scripts

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • security
    • None
    • Important

    Description

      Currently Amabari project does not provide a way for very security conscious clients to get editable scripts to be run on their system .

      In a real world scenario with enterprise level customers, there will be no way that these customers will let the Ambari wizard run anything on the organization LDAP server .

      What we suggest to contribute is a framework which is based on "IBM''s kerberos automation toolkit for hadoop ", more details can be found here :
      https://developer.ibm.com/hadoop/blog/2014/12/11/ibms-kerberos-automation-toolkit-hadoop/

      This toolkit supports building scripts and other resources for both "openLDAP" and "Active Directory" in order to ease up the configuration of kerberos on hadoop enviornments for security concious clients . these scripts and artifacts are created based on the clients topology . and have been tested at various client sites.

      Attachments

        Activity

          People

            Unassigned Unassigned
            lazurinke Laser
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: