[jira] [Commented] (HADOOP-15399) KMSAcls should read kms-site.xml file.

["Wei-Chiu Chuang (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HADOOP-15399?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16443020#comment-16443020 ] 

Wei-Chiu Chuang commented on HADOOP-15399:
------------------------------------------

Hi [~shahrs87],
hadoop.security.group.mapping related configs are loaded when KMS initializes 

{code:title=KMSWebApp#contextInitialized}
      kmsConf = KMSConfiguration.getKMSConf();
      initLogging(confDir);
      UserGroupInformation.setConfiguration(kmsConf);
{code}
(See: HADOOP-13638)

> KMSAcls should read kms-site.xml file.
> --------------------------------------
>
>                 Key: HADOOP-15399
>                 URL: https://issues.apache.org/jira/browse/HADOOP-15399
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: kms
>            Reporter: Rushabh S Shah
>            Assignee: Rushabh S Shah
>            Priority: Major
>             Fix For: 2.8.4
>
>
> KMSACLs uses {{AccessControlList}} for authorization.
> For creating groups membership, the group implementation class that will be instantiated is configured by {{hadoop.security.group.mapping}}.
> Today {{KMSACLs}} class reads only {{kms-acls.xml}} file to create {{AccessControlList}}.
> {{kms-acls.xml}} doesn't look the right place add the above config.
> So KMSAcls should read either kms-site.
> [~xiaochen]: Any preference which file should acls load ?
> IMO it should be kms-site because that file is mandatory. But all the properties in kms-site.xml starts with {{hadoop.kms}}, I am little bit inclined towards core-site.xml.
>  



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: common-issues-help@hadoop.apache.org