hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rushabh S Shah (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-12974) Exception information can not be returned when I create transparent encryption zone.
Date Wed, 03 Jan 2018 19:58:00 GMT

    [ https://issues.apache.org/jira/browse/HDFS-12974?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310207#comment-16310207

Rushabh S Shah commented on HDFS-12974:

[~zhenyi]: Thanks for reporting the bug.
Couple of things.
1. Are you sure that {{AuthorizationException}} is getting propagated back all the way back
to CryptoAdmin ?
And after the fix applied, you are able to see the exception message ?
The code path that it is following involves rpc call from {{DFSClient}} to {{namenode}} and
then Rest call from {{namenode}} to {{kms}}.
On top of that, {{KMSClientProvider}} uses Guava caching to load the keys very first time
and that method  {{ValueQueue#initializeQueuesForKeys}} just throws {{ExecutionException}}.
2. Also I think the test case is not sufficient for the bug.
If the bug is in {{CreateEncryptionZoneCommand}} then it will be nice to create one which
throws {{AuthorizationException}} and see whether it prints right exception.

> Exception information can not be returned when I create transparent encryption zone.
> ------------------------------------------------------------------------------------
>                 Key: HDFS-12974
>                 URL: https://issues.apache.org/jira/browse/HDFS-12974
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: encryption
>    Affects Versions: 3.0.0
>            Reporter: fang zhenyi
>            Assignee: fang zhenyi
>            Priority: Minor
>             Fix For: 3.1.0
>         Attachments: HDFS-12974.001.patch, HDFS-12974.002.patch
> When I add the following configuration to the kms-acl.xml file, I create encrypted space
and I can not get any exception information.
> <property>
>   <name>key.acl.key2.GENERATE_EEK</name>
>   <value>mr</value>
> </property>
> root@fangzhenyi01:~# hdfs crypto -createZone -keyName key2 -path /zone
> 2018-01-02 10:41:44,632 WARN util.NativeCodeLoader: Unable to load native-hadoop library
for your platform... using builtin-java classes where applicable
> RemoteException: 
> root@fangzhenyi01:~# 

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org

View raw message