ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "nick dimiduk" <ndimi...@gmail.com>
Subject Re: Review Request 33466: AMBARI-10680 Phoenix Query Server not supported in secure deployments
Date Thu, 23 Apr 2015 17:18:14 GMT


> On April 22, 2015, 10:46 p.m., Jayush Luniya wrote:
> > ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py,
line 96
> > <https://reviews.apache.org/r/33466/diff/1/?file=940211#file940211line96>
> >
> >     In hbase.py
> >     The JAAS file is written to hbase_queryserver_jaas.conf. 
> >     
> >       if params.security_enabled:
> >         hbase_TemplateConfig( format("hbase_{name}_jaas.conf"))
> >     
> >     However I dont see this variable used anywhere. Looks like you need to add hbase-env.xml
in stacks/HDP/2.3/services/HBASE/configuration and override "content" property 
> >     
> >     i.e. 
> >     <configuration>
> >       <!-- hbase-env.sh -->
> >       <property>
> >         <name>content</name>
> >         <description>This is the jinja template for hbase-env.sh file</description>
> >         <value>
> >         <!-- Updated settings for HDP 2.3 -->
> >         <value>
> >       </property>
> >     </configuration>
> >     
> >     
> >     Ref:
> >     
> >     {% if security_enabled %}
> >     export HBASE_OPTS="$HBASE_OPTS -XX:+UseConcMarkSweepGC -XX:ErrorFile={{log_dir}}/hs_err_pid%p.log
-Djava.security.auth.login.config={{client_jaas_config_file}}"
> >     export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS -Xmx{{master_heapsize}} -Djava.security.auth.login.config={{master_jaas_config_file}}"
> >     export HBASE_REGIONSERVER_OPTS="$HBASE_REGIONSERVER_OPTS -Xmn{{regionserver_xmn_size}}
-XX:CMSInitiatingOccupancyFraction=70  -Xms{{regionserver_heapsize}} -Xmx{{regionserver_heapsize}}
-Djava.security.auth.login.config={{regionserver_jaas_config_file}}"
> >     {% else %}
> >     export HBASE_OPTS="$HBASE_OPTS -XX:+UseConcMarkSweepGC -XX:ErrorFile={{log_dir}}/hs_err_pid%p.log"
> >     export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS -Xmx{{master_heapsize}}"
> >     export HBASE_REGIONSERVER_OPTS="$HBASE_REGIONSERVER_OPTS -Xmn{{regionserver_xmn_size}}
-XX:CMSInitiatingOccupancyFraction=70  -Xms{{regionserver_heapsize}} -Xmx{{regionserver_heapsize}}"
> >     {% endif %}

Yeah, you're probably right. Seems I need to add this file to the java cmd for launching the
query server as well. I'll need to make an update on the Phoenix side also.

I'll need to add a whole new content section to stacks/HDP/2.3/services/HBASE/configuration
? copy over what's already in common-services? I think I can just add the variable to the
one in common-services; it won't harm earlier versions.


- nick


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/33466/#review81269
-----------------------------------------------------------


On April 22, 2015, 9:47 p.m., nick dimiduk wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/33466/
> -----------------------------------------------------------
> 
> (Updated April 22, 2015, 9:47 p.m.)
> 
> 
> Review request for Ambari.
> 
> 
> Bugs: AMBARI-10680
>     https://issues.apache.org/jira/browse/AMBARI-10680
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> Enables QPS support on kerberized clusters.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json 67664a9

>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py
eafcd89 
>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/templates/hbase_queryserver_jaas.conf.j2
PRE-CREATION 
>   ambari-server/src/test/python/stacks/2.0.6/configs/secured.json 3f4aad9 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json ea57e66 
> 
> Diff: https://reviews.apache.org/r/33466/diff/
> 
> 
> Testing
> -------
> 
> 
> Thanks,
> 
> nick dimiduk
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message