[
https://issues.apache.org/jira/browse/HDFS-12052?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16081276#comment-16081276
]
John Zhuge commented on HDFS-12052:
-----------------------------------
Sorry for the confusion. The correct property name is {{httpfs.ssl.enabled}}.
The property names are documented in doc and httpfs-default.xml. Environment
variables are deprecated.
HDFS-10860 made mistakes in using both hadoop.httpfs.ssl.enabled and
httpfs.ssl.enabled. Filed HDFS-12114 to fix.
For your patch, please use the following code:
{code:java}
conf.setBoolean(HttpFSServerWebServer.SSL_ENABLED_KEY, true);
{code}
You'd have to make {{HttpFSServerWebServer.SSL_ENABLED_KEY}} package private.
> Set SWEBHDFS delegation token kind when ssl is enabled in HttpFS
> ----------------------------------------------------------------
>
> Key: HDFS-12052
> URL: https://issues.apache.org/jira/browse/HDFS-12052
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: httpfs, webhdfs
> Affects Versions: 2.7.3, 3.0.0-alpha3
> Reporter: Zoran Dimitrijevic
> Assignee: Zoran Dimitrijevic
> Attachments: HDFS-12052.00.patch, HDFS-12052.01.patch,
> HDFS-12052.02.patch, HDFS-12052.03.patch, HDFS-12052.04.patch,
> HDFS-12052.05.patch
>
>
> When httpfs runs with httpfs.ssl.enabled it should return SWEBHDFS delegation
> tokens.
> Currently, httpfs returns WEBHDFS delegation "kind" for tokens regardless of
> whether ssl is enabled or not. If clients directly connect to renew tokens
> (for example, hdfs dfs) all works because httpfs doesn't check whether token
> kind is for swebhdfs or webhdfs. However, this breaks when yarn rm needs to
> renew the token for the job (for example, when running hadoop distcp). Since
> DT kind is WEBHDFS, rm tries to establish non-ssl connection to httpfs and
> fails.
> I've tested a simple patch which I'll upload to this jira, and it fixes this
> issue (hadoop distcp works).
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
