ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Srimanth Gunturi (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-11919) After wire encryption, KMS client config (hdfs-site.xml and core-site.xml) should be updated to include https in URI
Date Mon, 15 Jun 2015 20:55:01 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-11919?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Srimanth Gunturi updated AMBARI-11919:
--------------------------------------
    Attachment: AMBARI-11919.patch

Tested patch on live cluster.
ambari-web tests pass.
ambari-server stack-advisor tests pass.

{noformat}

  6567 tests complete (10 seconds)
  86 tests pending

[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ ambari-web ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: .idea/**
[INFO] Exclude: package.json
[INFO] Exclude: public/**
[INFO] Exclude: public-static/**
[INFO] Exclude: app/assets/**
[INFO] Exclude: vendor/**
[INFO] Exclude: node_modules/**
[INFO] Exclude: node/**
[INFO] Exclude: npm-debug.log
[INFO] 1215 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 1215 licence.
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 42.158s
[INFO] Finished at: Mon Jun 15 13:54:10 PDT 2015
[INFO] Final Memory: 11M/171M
[INFO] ------------------------------------------------------------------------
{noformat}

> After wire encryption, KMS client config (hdfs-site.xml and core-site.xml) should be
updated to include https in URI
> --------------------------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-11919
>                 URL: https://issues.apache.org/jira/browse/AMBARI-11919
>             Project: Ambari
>          Issue Type: Bug
>          Components: contrib
>    Affects Versions: 2.1.0
>            Reporter: Srimanth Gunturi
>            Assignee: Srimanth Gunturi
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-11919.patch
>
>
> {{hadoop.security.key.provider.path (in core-site.xml)}} and {{dfs.encryption.key.provider.uri
(in hdfs-site.xml)}} should be updated to include https in the URI, when Ranger KMS is SSL
enabled.
> When SSL is enabled for Ranger KMS, {{ranger.service.https.attrib.ssl.enabled}} will
be true in KMS config (in Custom ranger-kms-site section)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message