-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/34408/
-----------------------------------------------------------
(Updated May 20, 2015, 2:47 p.m.)
Review request for Ambari, Andrew Onischuk, Robert Levas, and Vitalyi
Brodetskyi.
Changes
-------
Updated the 2.0.6 test stack with the xml_configurations_supported prop.
Bugs: AMBARI-11238
https://issues.apache.org/jira/browse/AMBARI-11238
Repository: ambari
Description
-------
STR:
1. Install HDP 2.2 cluster.
2. Add Ranger to the cluster via Add Service Wizard. While Ranger is added,
enable Ranger HBase plugin. This changes the following properties in hbase-site:
hbase.coprocessor.master.classes:
com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
hbase.coprocessor.region.classes:
org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,com.xasecure.authorization.hbase.XaSecureAuthorizationCoprocessor
3. Kerberization API, resets the following properties in hbase-site and
invalidates settings that are needed for Ranger HBase plugin:
"hbase.coprocessor.master.classes":
"org.apache.hadoop.hbase.security.access.AccessController"
"hbase.coprocessor.region.classes":
"org.apache.hadoop.hbase.security.token.TokenProvider,org.apache.hadoop.hbase.security.access.SecureBulkLoadEndpoint,org.apache.hadoop.hbase.security.access.AccessController"
# Problem:
The Kerberos descriptor updates the values and overrides hbase ranger plugin
props
# Solution:
Since the Kerberos descriptor does not currently support conditional
configuration updates, it will hold references to the two props which will be
then dynamically decided on the agent side before the config file is written,
during the lifecycle of hbase.
Diffs (updated)
-----
ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/kerberos.json
125a9c9
ambari-server/src/main/resources/common-services/HBASE/0.96.0.2.0/package/scripts/params_linux.py
410a690
ambari-server/src/test/python/stacks/2.0.6/configs/default.json 485e882
ambari-server/src/test/python/stacks/2.0.6/configs/secured.json 8616f3d
Diff: https://reviews.apache.org/r/34408/diff/
Testing
-------
HDP 2.2 with and without security/hbase ranger plugin
HDP 2.3 with and without security/hbase ranger plugin
mvn clean test -pl ambari-server
Thanks,
Emil Anca
