You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Jaimin D Jetly (JIRA)" <ji...@apache.org> on 2015/06/15 22:58:00 UTC
[jira] [Commented] (AMBARI-11919) After wire encryption, KMS client
config (hdfs-site.xml and core-site.xml) should be updated to include https
in URI
[ https://issues.apache.org/jira/browse/AMBARI-11919?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14586690#comment-14586690 ]
Jaimin D Jetly commented on AMBARI-11919:
-----------------------------------------
+1 for the patch.
> After wire encryption, KMS client config (hdfs-site.xml and core-site.xml) should be updated to include https in URI
> --------------------------------------------------------------------------------------------------------------------
>
> Key: AMBARI-11919
> URL: https://issues.apache.org/jira/browse/AMBARI-11919
> Project: Ambari
> Issue Type: Bug
> Components: contrib
> Affects Versions: 2.1.0
> Reporter: Srimanth Gunturi
> Assignee: Srimanth Gunturi
> Fix For: 2.1.0
>
> Attachments: AMBARI-11919.patch
>
>
> {{hadoop.security.key.provider.path (in core-site.xml)}} and {{dfs.encryption.key.provider.uri (in hdfs-site.xml)}} should be updated to include https in the URI, when Ranger KMS is SSL enabled.
> When SSL is enabled for Ranger KMS, {{ranger.service.https.attrib.ssl.enabled}} will be true in KMS config (in Custom ranger-kms-site section)
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)