You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by Dmitro Lisnichenko <dl...@hortonworks.com> on 2014/10/02 21:45:37 UTC
Review Request 26278: Ambari support for DataNode no longer running
as root.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/26278/
-----------------------------------------------------------
Review request for Ambari and Vitalyi Brodetskyi.
Bugs: AMBARI-7615
https://issues.apache.org/jira/browse/AMBARI-7615
Repository: ambari
Description
-------
This feature is new in Champlain.
This feature is intended for use in secure (Kerberized) clusters. The full steps for configuration are:
Configure in hdfs-site.xml:
Set dfs.data.transfer.protection to authentication, integrity, or privacy. I think authentication makes sense as the default on new installs.
Set dfs.datanode.address to use a non-privileged port, i.e. 0.0.0.0:50010.
Set dfs.datanode.https.address to use a non-privileged port, i.e. 0.0.0.0:50475.
Set dfs.http.policy to HTTPS_ONLY.
Start DataNode as hdfs.
BTW, running as root using privileged ports is still a fully supported configuration. This should continue to be the default mode. Running as non-root is opt-in only, so all of the above should be optional.
Diffs
-----
ambari-server/src/main/resources/stacks/HDP/2.0.6/services/HDFS/package/scripts/params.py 5119274
ambari-server/src/main/resources/stacks/HDP/2.0.6/services/HDFS/package/scripts/utils.py f1f0ac4
ambari-server/src/main/resources/stacks/HDP/2.0.6/services/stack_advisor.py 4057392
ambari-server/src/main/resources/stacks/HDP/2.1/services/stack_advisor.py 7fda89e
ambari-server/src/main/resources/stacks/HDP/2.2/services/HDFS/configuration/hadoop-env.xml PRE-CREATION
ambari-server/src/main/resources/stacks/HDP/2.2/services/stack_advisor.py PRE-CREATION
ambari-server/src/test/python/stacks/2.0.6/HDFS/test_datanode.py 6d8bad4
ambari-server/src/test/python/stacks/2.2/common/test_stack_advisor.py PRE-CREATION
ambari-server/src/test/python/stacks/utils/RMFTestCase.py a59de73
ambari-web/app/messages.js 32513a8
Diff: https://reviews.apache.org/r/26278/diff/
Testing
-------
[INFO]
[INFO] Ambari Main ....................................... SUCCESS [3.489s]
[INFO] Apache Ambari Project POM ......................... SUCCESS [0.300s]
[INFO] Ambari Web ........................................ SUCCESS [23.044s]
[INFO] Ambari Views ...................................... SUCCESS [1.732s]
[INFO] Ambari Admin View ................................. SUCCESS [10.227s]
[INFO] Ambari Server ..................................... SUCCESS [18:44.677s]
[INFO] Ambari Agent ...................................... SUCCESS [9.778s]
[INFO] Ambari Client ..................................... SUCCESS [0.031s]
[INFO] Ambari Python Client .............................. SUCCESS [0.253s]
[INFO] Ambari Groovy Client .............................. SUCCESS [9.432s]
[INFO] Ambari Shell ...................................... SUCCESS [0.038s]
[INFO] Ambari Python Shell ............................... SUCCESS [0.052s]
[INFO] Ambari Groovy Shell ............................... SUCCESS [6.655s]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 19:50.381s
[INFO] Finished at: Thu Oct 02 22:23:17 FET 2014
[INFO] Final Memory: 49M/399M
[INFO] ------------------------------------------------------------------------
Thanks,
Dmitro Lisnichenko
Re: Review Request 26278: Ambari support for DataNode no longer
running as root.
Posted by Vitalyi Brodetskyi <vb...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/26278/#review55240
-----------------------------------------------------------
Ship it!
Ship It!
- Vitalyi Brodetskyi
On Жов. 2, 2014, 7:45 після полудня, Dmitro Lisnichenko wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/26278/
> -----------------------------------------------------------
>
> (Updated Жов. 2, 2014, 7:45 після полудня)
>
>
> Review request for Ambari and Vitalyi Brodetskyi.
>
>
> Bugs: AMBARI-7615
> https://issues.apache.org/jira/browse/AMBARI-7615
>
>
> Repository: ambari
>
>
> Description
> -------
>
> This feature is new in Champlain.
> This feature is intended for use in secure (Kerberized) clusters. The full steps for configuration are:
> Configure in hdfs-site.xml:
> Set dfs.data.transfer.protection to authentication, integrity, or privacy. I think authentication makes sense as the default on new installs.
> Set dfs.datanode.address to use a non-privileged port, i.e. 0.0.0.0:50010.
> Set dfs.datanode.https.address to use a non-privileged port, i.e. 0.0.0.0:50475.
> Set dfs.http.policy to HTTPS_ONLY.
> Start DataNode as hdfs.
> BTW, running as root using privileged ports is still a fully supported configuration. This should continue to be the default mode. Running as non-root is opt-in only, so all of the above should be optional.
>
>
> Diffs
> -----
>
> ambari-server/src/main/resources/stacks/HDP/2.0.6/services/HDFS/package/scripts/params.py 5119274
> ambari-server/src/main/resources/stacks/HDP/2.0.6/services/HDFS/package/scripts/utils.py f1f0ac4
> ambari-server/src/main/resources/stacks/HDP/2.0.6/services/stack_advisor.py 4057392
> ambari-server/src/main/resources/stacks/HDP/2.1/services/stack_advisor.py 7fda89e
> ambari-server/src/main/resources/stacks/HDP/2.2/services/HDFS/configuration/hadoop-env.xml PRE-CREATION
> ambari-server/src/main/resources/stacks/HDP/2.2/services/stack_advisor.py PRE-CREATION
> ambari-server/src/test/python/stacks/2.0.6/HDFS/test_datanode.py 6d8bad4
> ambari-server/src/test/python/stacks/2.2/common/test_stack_advisor.py PRE-CREATION
> ambari-server/src/test/python/stacks/utils/RMFTestCase.py a59de73
> ambari-web/app/messages.js 32513a8
>
> Diff: https://reviews.apache.org/r/26278/diff/
>
>
> Testing
> -------
>
> [INFO]
> [INFO] Ambari Main ....................................... SUCCESS [3.489s]
> [INFO] Apache Ambari Project POM ......................... SUCCESS [0.300s]
> [INFO] Ambari Web ........................................ SUCCESS [23.044s]
> [INFO] Ambari Views ...................................... SUCCESS [1.732s]
> [INFO] Ambari Admin View ................................. SUCCESS [10.227s]
> [INFO] Ambari Server ..................................... SUCCESS [18:44.677s]
> [INFO] Ambari Agent ...................................... SUCCESS [9.778s]
> [INFO] Ambari Client ..................................... SUCCESS [0.031s]
> [INFO] Ambari Python Client .............................. SUCCESS [0.253s]
> [INFO] Ambari Groovy Client .............................. SUCCESS [9.432s]
> [INFO] Ambari Shell ...................................... SUCCESS [0.038s]
> [INFO] Ambari Python Shell ............................... SUCCESS [0.052s]
> [INFO] Ambari Groovy Shell ............................... SUCCESS [6.655s]
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD SUCCESS
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time: 19:50.381s
> [INFO] Finished at: Thu Oct 02 22:23:17 FET 2014
> [INFO] Final Memory: 49M/399M
> [INFO] ------------------------------------------------------------------------
>
>
> Thanks,
>
> Dmitro Lisnichenko
>
>