[
https://issues.apache.org/jira/browse/AMBARI-18071?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15477925#comment-15477925
]
Hudson commented on AMBARI-18071:
---------------------------------
FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #5645 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/5645/])
AMBARI-18071: Ambari Files View needs to have ability to load security (dili:
[http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=6b04d3e0efa6672b7f49db57914f6bda7071d49c])
* (edit)
contrib/views/utils/src/main/java/org/apache/ambari/view/utils/hdfs/ConfigurationBuilder.java
* (edit)
contrib/views/utils/src/test/java/org/apache/ambari/view/utils/hdfs/ConfigurationBuilderTest.java
> Ambari Files View needs to have ability to load security configurations
> -----------------------------------------------------------------------
>
> Key: AMBARI-18071
> URL: https://issues.apache.org/jira/browse/AMBARI-18071
> Project: Ambari
> Issue Type: Improvement
> Components: contrib
> Affects Versions: trunk
> Reporter: Keta Patel
> Assignee: Keta Patel
> Attachments: AMBARI-18071-Sep6.patch, AMBARI-18071.patch,
> NoKeyProvider.png
>
>
> When HDFS is configured with Encryption Zones, Files View to browser files
> will give "No KeyProvider" error.
> Steps to reproduce this issue:
> 1. Configure an encrypted zone in HDFS (Transparent Data Encryption). You can
> follow the link
> https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_hdfs_admin_tools/content/ch_configuring_hdfs_encryption.html
> I have used Hadoop's KMS (installed tar manually).
> 2. Create a Files View instance and provide a user/group the privilege to use
> the instance.
> 3. Log into the Ambari console as the user with the Files View permission.
> 4. Open the Files View instance.
> 5. Go to the folder which is configured as an encrypted zone.
> 6. Try to open an existing file in this folder.
> 7. This throws an error - java.io.IOException: No KeyProvider is configured,
> cannot access an encrypted file.
> 8. When trying through the shell, opening this file works.
> This happens because Files View doesn't have enough configuration set to
> browse secured zone. Files view doesn't even provide an option to add these
> configurations.This is why we see errors "No KeyProvider is configured,
> cannot access an encrypted file", to work around this, you could download
> client configuration from HDFS service tab, and copy the core-site.xml and
> hdfs-site.xml files to /etc/ambari-server/conf, then restart ambari-server.
> After this, the user is able to open the file in the encrypted zone.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
