[
https://issues.apache.org/jira/browse/HDFS-12974?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310207#comment-16310207
]
Rushabh S Shah edited comment on HDFS-12974 at 1/3/18 7:59 PM:
---------------------------------------------------------------
[~zhenyi]: Thanks for reporting the bug.
Couple of things.
1. Are you sure that {{AuthorizationException}} is getting propagated all the
way back to CryptoAdmin ?
And after the fix applied, are you able to see the exception message ?
The code path that it is following involves rpc call from {{DFSClient}} to
{{namenode}} and then Rest call from {{namenode}} to {{kms}}.
On top of that, {{KMSClientProvider}} uses Guava caching to load the keys very
first time and that method {{ValueQueue#initializeQueuesForKeys}} just throws
{{ExecutionException}}.
2. Also I think the test case is not sufficient for the bug.
If the bug is in {{CreateEncryptionZoneCommand}} then it will be nice to create
one which throws {{AuthorizationException}} and see whether it prints right
exception.
was (Author: shahrs87):
[~zhenyi]: Thanks for reporting the bug.
Couple of things.
1. Are you sure that {{AuthorizationException}} is getting propagated back all
the way back to CryptoAdmin ?
And after the fix applied, you are able to see the exception message ?
The code path that it is following involves rpc call from {{DFSClient}} to
{{namenode}} and then Rest call from {{namenode}} to {{kms}}.
On top of that, {{KMSClientProvider}} uses Guava caching to load the keys very
first time and that method {{ValueQueue#initializeQueuesForKeys}} just throws
{{ExecutionException}}.
2. Also I think the test case is not sufficient for the bug.
If the bug is in {{CreateEncryptionZoneCommand}} then it will be nice to create
one which throws {{AuthorizationException}} and see whether it prints right
exception.
> Exception information can not be returned when I create transparent
> encryption zone.
> ------------------------------------------------------------------------------------
>
> Key: HDFS-12974
> URL: https://issues.apache.org/jira/browse/HDFS-12974
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: encryption
> Affects Versions: 3.0.0
> Reporter: fang zhenyi
> Assignee: fang zhenyi
> Priority: Minor
> Fix For: 3.1.0
>
> Attachments: HDFS-12974.001.patch, HDFS-12974.002.patch
>
>
> When I add the following configuration to the kms-acl.xml file, I create
> encrypted space and I can not get any exception information.
> <property>
> <name>key.acl.key2.GENERATE_EEK</name>
> <value>mr</value>
> </property>
> root@fangzhenyi01:~# hdfs crypto -createZone -keyName key2 -path /zone
> 2018-01-02 10:41:44,632 WARN util.NativeCodeLoader: Unable to load
> native-hadoop library for your platform... using builtin-java classes where
> applicable
> RemoteException:
> root@fangzhenyi01:~#
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
