ambari-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From smoha...@apache.org
Subject ambari git commit: AMBARI-18096. YARN config to fetch new HDFS delegation tokens is not enabled (smohanty)
Date Wed, 10 Aug 2016 13:50:14 GMT
Repository: ambari
Updated Branches:
  refs/heads/trunk 37e1f5ab2 -> 84609068e


AMBARI-18096. YARN config to fetch new HDFS delegation tokens is not enabled (smohanty)


Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/84609068
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/84609068
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/84609068

Branch: refs/heads/trunk
Commit: 84609068e03bf0d9a97be15dcc192d734970e512
Parents: 37e1f5a
Author: Sumit Mohanty <smohanty@hortonworks.com>
Authored: Wed Aug 10 06:46:09 2016 -0700
Committer: Sumit Mohanty <smohanty@hortonworks.com>
Committed: Wed Aug 10 06:50:06 2016 -0700

----------------------------------------------------------------------
 .../resources/stacks/HDP/2.3/services/stack_advisor.py    | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/ambari/blob/84609068/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py b/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
index 9a099c6..a0cce7b 100644
--- a/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
+++ b/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
@@ -692,8 +692,14 @@ class HDP23StackAdvisor(HDP22StackAdvisor):
     else:
       putYarnSitePropertyAttributes('yarn.authorization-provider', 'delete', 'true')
 
-    if 'RANGER_KMS' in servicesList and 'KERBEROS' in servicesList:
-      if 'yarn-site' in services["configurations"] and 'yarn.resourcemanager.proxy-user-privileges.enabled'
in services["configurations"]["yarn-site"]["properties"]:
+    if 'yarn-site' in services["configurations"] and 'yarn.resourcemanager.proxy-user-privileges.enabled'
in services["configurations"]["yarn-site"]["properties"]:
+      if self.isSecurityEnabled(services):
+        # enable proxy-user privileges for secure clusters for long-running services (spark
streaming etc)
+        putYarnSiteProperty('yarn.resourcemanager.proxy-user-privileges.enabled', 'true')
+        if 'RANGER_KMS' in servicesList:
+          # disable proxy-user privileges on secure clusters as it does not work with TDE
+          putYarnSiteProperty('yarn.resourcemanager.proxy-user-privileges.enabled', 'false')
+      else:
         putYarnSiteProperty('yarn.resourcemanager.proxy-user-privileges.enabled', 'false')
 
 


Mime
View raw message