ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "nick dimiduk" <ndimi...@gmail.com>
Subject Re: Review Request 33466: AMBARI-10680 Phoenix Query Server not supported in secure deployments
Date Thu, 23 Apr 2015 19:21:07 GMT


> On April 22, 2015, 10:46 p.m., Jayush Luniya wrote:
> > ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py,
line 96
> > <https://reviews.apache.org/r/33466/diff/1/?file=940211#file940211line96>
> >
> >     In hbase.py
> >     The JAAS file is written to hbase_queryserver_jaas.conf. 
> >     
> >       if params.security_enabled:
> >         hbase_TemplateConfig( format("hbase_{name}_jaas.conf"))
> >     
> >     However I dont see this variable used anywhere. Looks like you need to add hbase-env.xml
in stacks/HDP/2.3/services/HBASE/configuration and override "content" property 
> >     
> >     i.e. 
> >     <configuration>
> >       <!-- hbase-env.sh -->
> >       <property>
> >         <name>content</name>
> >         <description>This is the jinja template for hbase-env.sh file</description>
> >         <value>
> >         <!-- Updated settings for HDP 2.3 -->
> >         <value>
> >       </property>
> >     </configuration>
> >     
> >     
> >     Ref:
> >     
> >     {% if security_enabled %}
> >     export HBASE_OPTS="$HBASE_OPTS -XX:+UseConcMarkSweepGC -XX:ErrorFile={{log_dir}}/hs_err_pid%p.log
-Djava.security.auth.login.config={{client_jaas_config_file}}"
> >     export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS -Xmx{{master_heapsize}} -Djava.security.auth.login.config={{master_jaas_config_file}}"
> >     export HBASE_REGIONSERVER_OPTS="$HBASE_REGIONSERVER_OPTS -Xmn{{regionserver_xmn_size}}
-XX:CMSInitiatingOccupancyFraction=70  -Xms{{regionserver_heapsize}} -Xmx{{regionserver_heapsize}}
-Djava.security.auth.login.config={{regionserver_jaas_config_file}}"
> >     {% else %}
> >     export HBASE_OPTS="$HBASE_OPTS -XX:+UseConcMarkSweepGC -XX:ErrorFile={{log_dir}}/hs_err_pid%p.log"
> >     export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS -Xmx{{master_heapsize}}"
> >     export HBASE_REGIONSERVER_OPTS="$HBASE_REGIONSERVER_OPTS -Xmn{{regionserver_xmn_size}}
-XX:CMSInitiatingOccupancyFraction=70  -Xms{{regionserver_heapsize}} -Xmx{{regionserver_heapsize}}"
> >     {% endif %}
> 
> nick dimiduk wrote:
>     Yeah, you're probably right. Seems I need to add this file to the java cmd for launching
the query server as well. I'll need to make an update on the Phoenix side also.
>     
>     I'll need to add a whole new content section to stacks/HDP/2.3/services/HBASE/configuration
? copy over what's already in common-services? I think I can just add the variable to the
one in common-services; it won't harm earlier versions.

I think v01 addresses this aspect of hbase_queryserver_jaas.conf. I still need to update the
Phoenix side to consume the file.


- nick


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/33466/#review81269
-----------------------------------------------------------


On April 23, 2015, 12:20 p.m., nick dimiduk wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/33466/
> -----------------------------------------------------------
> 
> (Updated April 23, 2015, 12:20 p.m.)
> 
> 
> Review request for Ambari.
> 
> 
> Bugs: AMBARI-10680
>     https://issues.apache.org/jira/browse/AMBARI-10680
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> Enables QPS support on kerberized clusters.
> 
> 
> Diffs
> -----
> 
>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/configuration/hbase-env.xml
24705e7 
>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json 67664a9

>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py
6a3a1a4 
>   ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/templates/hbase_queryserver_jaas.conf.j2
PRE-CREATION 
>   ambari-server/src/test/python/stacks/2.0.6/configs/secured.json 7d66e72 
>   ambari-server/src/test/python/stacks/2.3/configs/hbase_secure.json ea57e66 
> 
> Diff: https://reviews.apache.org/r/33466/diff/
> 
> 
> Testing
> -------
> 
> 
> Thanks,
> 
> nick dimiduk
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message