Gautam Borad created AMBARI-14092:
-------------------------------------
Summary: Set yarn.resourcemanager.proxy-user-privileges.enabled to
false in yarn-site when TDE is enabled
Key: AMBARI-14092
URL: https://issues.apache.org/jira/browse/AMBARI-14092
Project: Ambari
Issue Type: Bug
Components: ambari-server
Affects Versions: 2.1.3
Reporter: Gautam Borad
Assignee: Gautam Borad
Fix For: 2.1.3
*+Problem Statement+*
The problem is that Resource Manager automatically request the hdfs token on
app submission if "yarn.resourcemanager.proxy-user-privileges.enabled" is true.
When requesting hdfs token, since KMS is enabled, it also requests the KMS
token along with hdfs token (the code assumes this). This operation failed
because RM does not have the privilege to request the kms token on user's
behalf.
*+Solution+*
“yarn.resourcemanager.proxy-user-privileges.enabled” in yarn-site.xml needs to
be set to false, if TDE is enabled.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
