[jira] [Updated] (AMBARI-14092) Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site when TDE is enabled

["Gautam Borad (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/AMBARI-14092?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gautam Borad updated AMBARI-14092:
----------------------------------
    Attachment: AMBARI-14092.patch

> Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site when TDE is enabled
> ------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-14092
>                 URL: https://issues.apache.org/jira/browse/AMBARI-14092
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.1.3
>            Reporter: Gautam Borad
>            Assignee: Gautam Borad
>             Fix For: 2.1.3
>
>         Attachments: AMBARI-14092.patch
>
>
> *+Problem Statement+*
> The problem is that Resource Manager automatically request the hdfs token on app submission if "yarn.resourcemanager.proxy-user-privileges.enabled" is true.
> When requesting hdfs token, since KMS is enabled, it also requests the KMS token along with hdfs token (the code assumes this). This operation failed because RM does not have the privilege to request the kms token on user's behalf.
> *+Solution+*
> “yarn.resourcemanager.proxy-user-privileges.enabled” in yarn-site.xml needs to be set to false, if TDE is enabled.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)