ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Onischuk" <>
Subject Review Request 22730: Secure cluster: JCE policy files not distributed on non-client hosts.
Date Wed, 18 Jun 2014 14:05:12 GMT

This is an automatically generated e-mail. To reply, visit:

Review request for Ambari and Dmitro Lisnichenko.

Bugs: AMBARI-6185

Repository: ambari


Looks like code to distribute JCE policy is in before-install hooks
So if no INSTALL task has executed on a host in secure cluster (for agent is security enabled) then JCE policy
will not be distributed and unzipped on that host

Cluster can easily fall in a situation where a host has no client component.
Following are example scenarios

  1. While installing partial set of services with default selection for serviceComponent
allocation to hosts in installer wizard
  2. Adding a new host with slave components but no client components.

This leads to failure of starting serviceComponent that has no client
installed with them on a host in secure cluster.

I discovered this bug while securing a cluster with just HDFS+ZK+STORM
installed. Security wizard start all services failed with ZK quorum check
failure. Once I installed HDFS_CLIENT on all hosts and restarted all services
then all services came up in secure cluster.


  ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-INSTALL/scripts/ 6904e9d

  ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-START/scripts/ 703889e

  ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/before-START/scripts/ fbb358f




mvn clean test


Andrew Onischuk

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message