[
https://issues.apache.org/jira/browse/AMBARI-14092?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15030263#comment-15030263
]
Hudson commented on AMBARI-14092:
---------------------------------
FAILURE: Integrated in Ambari-trunk-Commit #3927 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/3927/])
AMBARI-14092. Set yarn.resourcemanager.proxy-user-privileges.enabled to
(smohanty:
[http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=bea418b75ed3ee9b2e4fa12d29a034bdfff96b4e])
* ambari-server/src/main/resources/stacks/HDP/2.3/services/stack_advisor.py
> Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site
> when TDE is enabled
> ------------------------------------------------------------------------------------------------
>
> Key: AMBARI-14092
> URL: https://issues.apache.org/jira/browse/AMBARI-14092
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.1.3
> Reporter: Gautam Borad
> Assignee: Gautam Borad
> Fix For: 2.1.3
>
> Attachments: AMBARI-14092.patch
>
>
> *+Problem Statement+*
> The problem is that Resource Manager automatically request the hdfs token on
> app submission if "yarn.resourcemanager.proxy-user-privileges.enabled" is
> true.
> When requesting hdfs token, since KMS is enabled, it also requests the KMS
> token along with hdfs token (the code assumes this). This operation failed
> because RM does not have the privilege to request the kms token on user's
> behalf.
> *+Solution+*
> “yarn.resourcemanager.proxy-user-privileges.enabled” in yarn-site.xml needs
> to be set to false, if TDE is enabled.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
