ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (AMBARI-11238) When Kerberizing a cluster with Ranger HBase plugin enabled, HBase coprocessor properties in hbase-site are overwritten (and breaks Ranger HBase plugin)
Date Wed, 20 May 2015 14:48:02 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-11238?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Robert Levas resolved AMBARI-11238.
-----------------------------------
    Resolution: Fixed

Committed to trunk
{code}
commit 91c628dade3f96d5a45567def9df6b6acb07d8a5
Author: Emil Anca <eanca@hortonworks.com>
Date:   Wed May 20 10:45:18 2015 -0400
{code}

> When Kerberizing a cluster with Ranger HBase plugin enabled, HBase coprocessor properties
in hbase-site are overwritten (and breaks Ranger HBase plugin)
> --------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-11238
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11238
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.0.0
>            Reporter: Emil Anca
>            Assignee: Emil Anca
>            Priority: Critical
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-11238_01.patch, AMBARI-11238_02.patch, AMBARI-11238_03.patch
>
>
> STR:
> 1. Install HDP 2.2 cluster.
> 2. Add Ranger to the cluster via Add Service Wizard. While Ranger is added, enable Ranger
HBase plugin. This changes the following properties in hbase-site:
> hbase.coprocessor.master.classes: com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> hbase.coprocessor.region.classes: org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
> 3. Kerberization API, resets the following properties in hbase-site and invalidates settings
that are needed for Ranger HBase plugin:
> "hbase.coprocessor.master.classes": "org.apache.hadoop.hbase.security.access.AccessController"
> "hbase.coprocessor.region.classes": "org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController"



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message