[jira] [Commented] (OOZIE-2033) HA and misc improvements to SSL docs

["Venkat Sambath (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OOZIE-2033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15263608#comment-15263608 ] 

Venkat Sambath commented on OOZIE-2033:
---------------------------------------

[~rkanter] Over the "Additional considerations for Oozie HA with SSL"

Option 1) suggests that for self-signed certificate, the cert needs to be imported to the Jobtracker/ResourceManager node alone. But This is not working unless I install the certificates to all nodemanager nodes (/usr/java/jdk/jre/lib/security/cacerts). Since the callback notification gets triggered from AM to the load balancer https address and the AM can be run from any node where the nodemanager is running. Can the document be changed to include JobTracker/Nodemanager instead of Jobtracker/ResourceManager ?

Thank you




> HA and misc improvements to SSL docs
> ------------------------------------
>
>                 Key: OOZIE-2033
>                 URL: https://issues.apache.org/jira/browse/OOZIE-2033
>             Project: Oozie
>          Issue Type: Improvement
>          Components: docs, HA, security
>    Affects Versions: 4.0.1
>            Reporter: Robert Kanter
>            Assignee: Robert Kanter
>             Fix For: 4.1.0
>
>         Attachments: OOZIE-2033.patch
>
>
> We were recently looking into using Oozie HA with Kerberos with SSL (I know, that's crazy) and ran into some trickiness.  We've figured it out, but there's some information that would be good to know when using HA with SSL.  I've also got some other misc improvements for the SSL docs.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)