hadoop-hdfs-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Xiao Chen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HDFS-12974) Exception information can not be returned when I create transparent encryption zone.
Date Thu, 04 Jan 2018 06:47:00 GMT

    [ https://issues.apache.org/jira/browse/HDFS-12974?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310845#comment-16310845

Xiao Chen commented on HDFS-12974:

Thanks [~zhenyi]. I played with this a little more, and believe your fix is correct. Good
work on tracing this down!
I initially thought this has to do at the client side in CryptoAdmin, but it turns out the
message actually was lost when building server rpc response. 

Thanks [~shahrs87] for chiming in. I can see the {{AuthorizationException}} correctly propagated.
Don't think ValueQueue does any tricks to it - this is when creating the zones, so should
fail when {{getMetadata}}. KMSCP just throws the AE which is an IOE.

I still think it worths a end-to-end test here though, as Rushabh also echo'ed. You can look
at {{TestEncryptionZones}} for some existing example on how this could be done. {{EncryptionFaultInjector}}
is of direct interest. We can inject an {{AuthorizationException}} in {{createEncryptionZone}}
on NN, and verify the exception at the client side. {{GenericTestUtils#assertExceptionContains}}
is the helper function we usually use.

> Exception information can not be returned when I create transparent encryption zone.
> ------------------------------------------------------------------------------------
>                 Key: HDFS-12974
>                 URL: https://issues.apache.org/jira/browse/HDFS-12974
>             Project: Hadoop HDFS
>          Issue Type: Bug
>          Components: encryption
>    Affects Versions: 3.0.0
>            Reporter: fang zhenyi
>            Assignee: fang zhenyi
>            Priority: Minor
>             Fix For: 3.1.0
>         Attachments: HDFS-12974.001.patch, HDFS-12974.002.patch
> When I add the following configuration to the kms-acl.xml file, I create encrypted space
and I can not get any exception information.
> <property>
>   <name>key.acl.key2.GENERATE_EEK</name>
>   <value>mr</value>
> </property>
> root@fangzhenyi01:~# hdfs crypto -createZone -keyName key2 -path /zone
> 2018-01-02 10:41:44,632 WARN util.NativeCodeLoader: Unable to load native-hadoop library
for your platform... using builtin-java classes where applicable
> RemoteException: 
> root@fangzhenyi01:~# 

This message was sent by Atlassian JIRA

To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org

View raw message