----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/41373/#review110482 -----------------------------------------------------------
Ship it! Ship It! - Nate Cole On Dec. 14, 2015, 7:10 p.m., Jonathan Hurley wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/41373/ > ----------------------------------------------------------- > > (Updated Dec. 14, 2015, 7:10 p.m.) > > > Review request for Ambari, Alejandro Fernandez, Nate Cole, Sumit Mohanty, and > Swapan Shridhar. > > > Bugs: AMBARI-14377 > https://issues.apache.org/jira/browse/AMBARI-14377 > > > Repository: ambari > > > Description > ------- > > *Steps:* > # Try EU from HDP 2.1 to 2.3.4 on an unsecure and non-HA cluster > # Let the EU succeed > # Enable security on the cluster > > Result: > After enabling security HiveServer2 goes down > > Looked at the value of three properties: > hive.cluster.delegation.token.store.zookeeper.connectString": "localhost:2181" > hive.zookeeper.quorum": "localhost:2181" > hive.cluster.delegation.token.store.class:org.apache.hadoop.hive.thrift.ZooKeeperTokenStore > > It appears that values of first and second property are wrongly set (compared > this with a fresh non-HA cluster where Kerberos was enabled after install) > > As it turns out, the installation wizard sets these at Hive installation > time, even though they are only used for a Kerberized Hive. Therefore, the > Kerberization wizard doesn't set these at all. > > When upgrading from HDP 2.1 Hive, the installation wizard hasn't set these > since they first appeared in HDP 2.2. Therefore, they are never set. The > right way to fix this is to have the Kerberos Wizard determine that it needs > to calculate and set them. But that's an architectural change mostly. The > faster fix is to make Hive consistent - just set them on upgrade from HDP 2.1 > > > Diffs > ----- > > > ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/HiveKerberosConfigAction.java > 57b5135 > > ambari-server/src/main/java/org/apache/ambari/server/serveraction/upgrades/HiveZKQuorumConfigAction.java > PRE-CREATION > > ambari-server/src/main/resources/stacks/HDP/2.1/upgrades/nonrolling-upgrade-2.3.xml > 02cc107 > ambari-server/src/main/resources/stacks/HDP/2.2/upgrades/config-upgrade.xml > b134670 > > ambari-server/src/test/java/org/apache/ambari/server/serveraction/upgrades/HiveKerberosConfigActionTest.java > c050ec4 > > ambari-server/src/test/java/org/apache/ambari/server/serveraction/upgrades/HiveZKQuorumConfigActionTest.java > PRE-CREATION > > Diff: https://reviews.apache.org/r/41373/diff/ > > > Testing > ------- > > mvn clean test > > > Thanks, > > Jonathan Hurley > >
