ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jayush Luniya" <jlun...@hortonworks.com>
Subject Re: Review Request 33466: AMBARI-10680 Phoenix Query Server not supported in secure deployments
Date Thu, 23 Apr 2015 05:46:04 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/33466/#review81269
-----------------------------------------------------------



ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py
<https://reviews.apache.org/r/33466/#comment131561>

    In hbase.py
    The JAAS file is written to hbase_queryserver_jaas.conf. 
    
      if params.security_enabled:
        hbase_TemplateConfig( format("hbase_{name}_jaas.conf"))
    
    However I dont see this variable used anywhere. Looks like you need to add hbase-env.xml
in stacks/HDP/2.3/services/HBASE/configuration and override "content" property 
    
    i.e. 
    <configuration>
      <!-- hbase-env.sh -->
      <property>
        <name>content</name>
        <description>This is the jinja template for hbase-env.sh file</description>
        <value>
        <!-- Updated settings for HDP 2.3 -->
        <value>
      </property>
    </configuration>
    
    Ref:
    
    {% if security_enabled %}
    export HBASE_OPTS="$HBASE_OPTS -XX:+UseConcMarkSweepGC -XX:ErrorFile={{log_dir}}/hs_err_pid%p.log
-Djava.security.auth.login.config={{client_jaas_config_file}}"
    export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS -Xmx{{master_heapsize}} -Djava.security.auth.login.config={{master_jaas_config_file}}"
    export HBASE_REGIONSERVER_OPTS="$HBASE_REGIONSERVER_OPTS -Xmn{{regionserver_xmn_size}}
-XX:CMSInitiatingOccupancyFraction=70  -Xms{{regionserver_heapsize}} -Xmx{{regionserver_heapsize}}
-Djava.security.auth.login.config={{regionserver_jaas_config_file}}"
    {% else %}
    export HBASE_OPTS="$HBASE_OPTS -XX:+UseConcMarkSweepGC -XX:ErrorFile={{log_dir}}/hs_err_pid%p.log"
    export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS -Xmx{{master_heapsize}}"
    export HBASE_REGIONSERVER_OPTS="$HBASE_REGIONSERVER_OPTS -Xmn{{regionserver_xmn_size}}
-XX:CMSInitiatingOccupancyFraction=70  -Xms{{regionserver_heapsize}} -Xmx{{regionserver_heapsize}}"
    {% endif %}


- Jayush Luniya


On April 23, 2015, 4:47 a.m., nick dimiduk wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/33466/
> -----------------------------------------------------------
> 
> (Updated April 23, 2015, 4:47 a.m.)
> 
> 
> Review request for Ambari.
> 
> 
> Bugs: AMBARI-10680
>     https://issues.apache.org/jira/browse/AMBARI-10680
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> Enables QPS support on kerberized clusters.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json 67664a9

>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py
eafcd89 
>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/templates/hbase_queryserver_jaas.conf.j2
PRE-CREATION 
>   ambari-server/src/test/python/stacks/2.0.6/configs/secured.json 3f4aad9 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json ea57e66 
> 
> Diff: https://reviews.apache.org/r/33466/diff/
> 
> 
> Testing
> -------
> 
> 
> Thanks,
> 
> nick dimiduk
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message