-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/41373/
-----------------------------------------------------------
Review request for Ambari, Alejandro Fernandez, Nate Cole, Sumit Mohanty, and
Swapan Shridhar.
Bugs: AMBARI-14377
https://issues.apache.org/jira/browse/AMBARI-14377
Repository: ambari
Description
-------
*Steps:*
# Try EU from HDP 2.1 to 2.3.4 on an unsecure and non-HA cluster
# Let the EU succeed
# Enable security on the cluster
Result:
After enabling security HiveServer2 goes down
Looked at the value of three properties:
hive.cluster.delegation.token.store.zookeeper.connectString": "localhost:2181"
hive.zookeeper.quorum": "localhost:2181"
hive.cluster.delegation.token.store.class:org.apache.hadoop.hive.thrift.ZooKeeperTokenStore
It appears that values of first and second property are wrongly set (compared
this with a fresh non-HA cluster where Kerberos was enabled after install)
As it turns out, the installation wizard sets these at Hive installation time,
even though they are only used for a Kerberized Hive. Therefore, the
Kerberization wizard doesn't set these at all.
When upgrading from HDP 2.1 Hive, the installation wizard hasn't set these
since they first appeared in HDP 2.2. Therefore, they are never set. The right
way to fix this is to have the Kerberos Wizard determine that it needs to
calculate and set them. But that's an architectural change mostly. The faster
fix is to make Hive consistent - just set them on upgrade from HDP 2.1
Diffs
-----
ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/HiveKerberosConfigAction.java
57b5135
ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/HiveZKQuorumConfigAction.java
PRE-CREATION
ambari-server/src/main/resources/stacks/HDP/2.1/upgrades/nonrolling-upgrade-2.3.xml
02cc107
ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/config-upgrade.xml
b134670
ambari-server/src/test/java/org/apache/ambari/server/serveraction/upgrades/HiveKerberosConfigActionTest.java
c050ec4
ambari-server/src/test/java/org/apache/ambari/server/serveraction/upgrades/HiveZKQuorumConfigActionTest.java
PRE-CREATION
Diff: https://reviews.apache.org/r/41373/diff/
Testing
-------
mvn clean test
Thanks,
Jonathan Hurley
