ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-12247) Ranger Plugin SSL configuration for YARN needs to be fixed to not clash with HDFS
Date Sat, 04 Jul 2015 11:31:05 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-12247?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14613707#comment-14613707
] 

Hudson commented on AMBARI-12247:
---------------------------------

SUCCESS: Integrated in Ambari-branch-2.1 #165 (See [https://builds.apache.org/job/Ambari-branch-2.1/165/])
AMBARI-12247:Ranger Plugin SSL configuration for YARN needs to be fixed to not clash with
HDFS (Velmurugan Periasamy via jluniya) (jluniya: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=468e7b1c0ca568b7f70c693f492a23f804468892)
* ambari-server/src/main/resources/stacks/HDP/2.3/services/YARN/configuration/ranger-yarn-policymgr-ssl.xml
* ambari-common/src/main/python/resource_management/libraries/functions/setup_ranger_plugin_xml.py
* ambari-server/src/main/resources/stacks/HDP/2.3/services/YARN/configuration/ranger-yarn-security.xml


> Ranger Plugin SSL configuration for YARN needs to be fixed to not clash with HDFS
> ---------------------------------------------------------------------------------
>
>                 Key: AMBARI-12247
>                 URL: https://issues.apache.org/jira/browse/AMBARI-12247
>             Project: Ambari
>          Issue Type: Bug
>    Affects Versions: 2.1.0
>            Reporter: Velmurugan Periasamy
>            Assignee: Velmurugan Periasamy
>            Priority: Critical
>             Fix For: 2.1.0
>
>         Attachments: 0001-AMBARI-12247-Use-separate-ranger-policymgr-ssl.xml-f.patch
>
>
> When enabling SSL for Ranger, Yarn plugin communication breaks due to the below two issues.
> 1] Ambari code generates ranger-policymgr-ssl.xml for both HDFS and Yarn. Need to generate
different config file name for each service (because NameNode and ResourceManager can be running
on the same host)
> 2] In yarn config (Advanced ranger-yarn-security),  ranger.plugin.yarn.policy.rest.ssl.config.file
 attribute needs to be set as  /etc/hadoop/conf/ranger-policymgr-ssl-yarn.xml  => Currently,
it is using the default value /etc/yarn/conf/ranger-policymgr-ssl.xml  which is incorrect



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message