ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Gautam Borad (JIRA)" <j...@apache.org>
Subject [jira] [Created] (AMBARI-14092) Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site when TDE is enabled
Date Fri, 27 Nov 2015 07:36:11 GMT
Gautam Borad created AMBARI-14092:
-------------------------------------

             Summary: Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site
when TDE is enabled
                 Key: AMBARI-14092
                 URL: https://issues.apache.org/jira/browse/AMBARI-14092
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.1.3
            Reporter: Gautam Borad
            Assignee: Gautam Borad
             Fix For: 2.1.3


*+Problem Statement+*
The problem is that Resource Manager automatically request the hdfs token on app submission
if "yarn.resourcemanager.proxy-user-privileges.enabled" is true.

When requesting hdfs token, since KMS is enabled, it also requests the KMS token along with
hdfs token (the code assumes this). This operation failed because RM does not have the privilege
to request the kms token on user's behalf.

*+Solution+*
“yarn.resourcemanager.proxy-user-privileges.enabled” in yarn-site.xml needs to be set
to false, if TDE is enabled.





--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message