ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hadoop QA (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-14092) Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site when TDE is enabled
Date Fri, 27 Nov 2015 13:37:10 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-14092?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15029876#comment-15029876
] 

Hadoop QA commented on AMBARI-14092:
------------------------------------

{color:red}-1 overall{color}.  Here are the results of testing the latest attachment 
  http://issues.apache.org/jira/secure/attachment/12774616/AMBARI-14092.patch
  against trunk revision .

    {color:red}-1 patch{color}.  Top-level trunk compilation may be broken.

Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/4412//console

This message is automatically generated.

> Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site when TDE
is enabled
> ------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-14092
>                 URL: https://issues.apache.org/jira/browse/AMBARI-14092
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.1.3
>            Reporter: Gautam Borad
>            Assignee: Gautam Borad
>             Fix For: 2.1.3
>
>         Attachments: AMBARI-14092.patch
>
>
> *+Problem Statement+*
> The problem is that Resource Manager automatically request the hdfs token on app submission
if "yarn.resourcemanager.proxy-user-privileges.enabled" is true.
> When requesting hdfs token, since KMS is enabled, it also requests the KMS token along
with hdfs token (the code assumes this). This operation failed because RM does not have the
privilege to request the kms token on user's behalf.
> *+Solution+*
> “yarn.resourcemanager.proxy-user-privileges.enabled” in yarn-site.xml needs to be
set to false, if TDE is enabled.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message