You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ambari.apache.org by sm...@apache.org on 2016/08/10 13:46:20 UTC
ambari git commit: AMBARI-18096. YARN config to fetch new HDFS
delegation tokens is not enabled (smohanty)
Repository: ambari
Updated Branches:
refs/heads/branch-2.4 85ee1bb38 -> f8b78dfe9
AMBARI-18096. YARN config to fetch new HDFS delegation tokens is not enabled (smohanty)
Project: http://git-wip-us.apache.org/repos/asf/ambari/repo
Commit: http://git-wip-us.apache.org/repos/asf/ambari/commit/f8b78dfe
Tree: http://git-wip-us.apache.org/repos/asf/ambari/tree/f8b78dfe
Diff: http://git-wip-us.apache.org/repos/asf/ambari/diff/f8b78dfe
Branch: refs/heads/branch-2.4
Commit: f8b78dfe96292a0560c973ac27c783255e26251e
Parents: 85ee1bb
Author: Sumit Mohanty <sm...@hortonworks.com>
Authored: Wed Aug 10 06:46:09 2016 -0700
Committer: Sumit Mohanty <sm...@hortonworks.com>
Committed: Wed Aug 10 06:46:09 2016 -0700
----------------------------------------------------------------------
.../resources/stacks/HDP/2.3/services/stack_advisor.py | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/ambari/blob/f8b78dfe/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
----------------------------------------------------------------------
diff --git a/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py b/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
index 9a099c6..a0cce7b 100644
--- a/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
+++ b/ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
@@ -692,8 +692,14 @@ class HDP23StackAdvisor(HDP22StackAdvisor):
else:
putYarnSitePropertyAttributes('yarn.authorization-provider', 'delete', 'true')
- if 'RANGER_KMS' in servicesList and 'KERBEROS' in servicesList:
- if 'yarn-site' in services["configurations"] and 'yarn.resourcemanager.proxy-user-privileges.enabled' in services["configurations"]["yarn-site"]["properties"]:
+ if 'yarn-site' in services["configurations"] and 'yarn.resourcemanager.proxy-user-privileges.enabled' in services["configurations"]["yarn-site"]["properties"]:
+ if self.isSecurityEnabled(services):
+ # enable proxy-user privileges for secure clusters for long-running services (spark streaming etc)
+ putYarnSiteProperty('yarn.resourcemanager.proxy-user-privileges.enabled', 'true')
+ if 'RANGER_KMS' in servicesList:
+ # disable proxy-user privileges on secure clusters as it does not work with TDE
+ putYarnSiteProperty('yarn.resourcemanager.proxy-user-privileges.enabled', 'false')
+ else:
putYarnSiteProperty('yarn.resourcemanager.proxy-user-privileges.enabled', 'false')