[
https://issues.apache.org/jira/browse/AMBARI-14092?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15029876#comment-15029876
]
Hadoop QA commented on AMBARI-14092:
------------------------------------
{color:red}-1 overall{color}. Here are the results of testing the latest
attachment
http://issues.apache.org/jira/secure/attachment/12774616/AMBARI-14092.patch
against trunk revision .
{color:red}-1 patch{color}. Top-level trunk compilation may be broken.
Console output:
https://builds.apache.org/job/Ambari-trunk-test-patch/4412//console
This message is automatically generated.
> Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site
> when TDE is enabled
> ------------------------------------------------------------------------------------------------
>
> Key: AMBARI-14092
> URL: https://issues.apache.org/jira/browse/AMBARI-14092
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.1.3
> Reporter: Gautam Borad
> Assignee: Gautam Borad
> Fix For: 2.1.3
>
> Attachments: AMBARI-14092.patch
>
>
> *+Problem Statement+*
> The problem is that Resource Manager automatically request the hdfs token on
> app submission if "yarn.resourcemanager.proxy-user-privileges.enabled" is
> true.
> When requesting hdfs token, since KMS is enabled, it also requests the KMS
> token along with hdfs token (the code assumes this). This operation failed
> because RM does not have the privilege to request the kms token on user's
> behalf.
> *+Solution+*
> “yarn.resourcemanager.proxy-user-privileges.enabled” in yarn-site.xml needs
> to be set to false, if TDE is enabled.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
