[
https://issues.apache.org/jira/browse/HDFS-12974?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16310845#comment-16310845
]
Xiao Chen commented on HDFS-12974:
----------------------------------
Thanks [~zhenyi]. I played with this a little more, and believe your fix is
correct. Good work on tracing this down!
I initially thought this has to do at the client side in CryptoAdmin, but it
turns out the message actually was lost when building server rpc response.
Thanks [~shahrs87] for chiming in. I can see the {{AuthorizationException}}
correctly propagated. Don't think ValueQueue does any tricks to it - this is
when creating the zones, so should fail when {{getMetadata}}. KMSCP just throws
the AE which is an IOE.
I still think it worths a end-to-end test here though, as Rushabh also echo'ed.
You can look at {{TestEncryptionZones}} for some existing example on how this
could be done. {{EncryptionFaultInjector}} is of direct interest. We can inject
an {{AuthorizationException}} in {{createEncryptionZone}} on NN, and verify the
exception at the client side. {{GenericTestUtils#assertExceptionContains}} is
the helper function we usually use.
> Exception information can not be returned when I create transparent
> encryption zone.
> ------------------------------------------------------------------------------------
>
> Key: HDFS-12974
> URL: https://issues.apache.org/jira/browse/HDFS-12974
> Project: Hadoop HDFS
> Issue Type: Bug
> Components: encryption
> Affects Versions: 3.0.0
> Reporter: fang zhenyi
> Assignee: fang zhenyi
> Priority: Minor
> Fix For: 3.1.0
>
> Attachments: HDFS-12974.001.patch, HDFS-12974.002.patch
>
>
> When I add the following configuration to the kms-acl.xml file, I create
> encrypted space and I can not get any exception information.
> <property>
> <name>key.acl.key2.GENERATE_EEK</name>
> <value>mr</value>
> </property>
> root@fangzhenyi01:~# hdfs crypto -createZone -keyName key2 -path /zone
> 2018-01-02 10:41:44,632 WARN util.NativeCodeLoader: Unable to load
> native-hadoop library for your platform... using builtin-java classes where
> applicable
> RemoteException:
> root@fangzhenyi01:~#
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
