Mailing-List: contact issues-help@ambari.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@ambari.apache.org
Date: Wed, 7 Sep 2016 03:14:20 +0000 (UTC)
From: "Keta Patel (JIRA)" <jira@apache.org>
To: issues@ambari.apache.org
Message-ID: <JIRA.12995791.1470699516000.503715.1473218060533@Atlassian.JIRA>
In-Reply-To: <JIRA.12995791.1470699516000@Atlassian.JIRA>
References: <JIRA.12995791.1470699516000@Atlassian.JIRA> <JIRA.12995791.1470699516859@arcas>
Subject: [jira] [Updated] (AMBARI-18071) Ambari Files View needs to have
 ability to load security configurations
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Wed, 07 Sep 2016 03:14:22 -0000


     [ https://issues.apache.org/jira/browse/AMBARI-18071?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Keta Patel updated AMBARI-18071:
--------------------------------
    Attachment: AMBARI-18071-Sep6.patch

> Ambari Files View needs to have ability to load security configurations
> -----------------------------------------------------------------------
>
>                 Key: AMBARI-18071
>                 URL: https://issues.apache.org/jira/browse/AMBARI-18071
>             Project: Ambari
>          Issue Type: Improvement
>          Components: contrib
>    Affects Versions: trunk
>            Reporter: Keta Patel
>            Assignee: Keta Patel
>         Attachments: AMBARI-18071-Sep6.patch, AMBARI-18071.patch, NoKeyProvider.png
>
>
> When HDFS is configured with Encryption Zones, Files View to browser files will give "No KeyProvider" error.
> Steps to reproduce this issue:
> 1. Configure an encrypted zone in HDFS (Transparent Data Encryption). You can follow the link https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_hdfs_admin_tools/content/ch_configuring_hdfs_encryption.html
> I have used Hadoop's KMS (installed tar manually).
> 2. Create a Files View instance and provide a user/group the privilege to use the instance.
> 3. Log into the Ambari console as the user with the Files View permission.
> 4. Open the Files View instance.
> 5. Go to the folder which is configured as an encrypted zone.
> 6. Try to open an existing file in this folder.
> 7. This throws an error - java.io.IOException: No KeyProvider is configured, cannot access an encrypted file. 
> 8. When trying through the shell, opening this file works.
> This happens because Files View doesn't have enough configuration set to browse secured zone. Files view doesn't even provide an option to add these configurations.This is why we see errors "No KeyProvider is configured, cannot access an encrypted file", to work around this, you could download client configuration from HDFS service tab, and copy the core-site.xml and hdfs-site.xml files to /etc/ambari-server/conf, then restart ambari-server. After this, the user is able to open the file in the encrypted zone.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)