[
https://issues.apache.org/jira/browse/AMBARI-23106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16391775#comment-16391775
]
Hudson commented on AMBARI-23106:
---------------------------------
FAILURE: Integrated in Jenkins build Ambari-trunk-Commit #8826 (See
[https://builds.apache.org/job/Ambari-trunk-Commit/8826/])
AMBARI-23106. Optionally generate localjceks://file/{path} url (#590)
(6454655+adoroszlai:
[https://gitbox.apache.org/repos/asf?p=ambari.git&a=commit&h=31bdda57f59a4b1b6ea0502a7e980a04fa3993b5])
* (edit)
ambari-common/src/main/python/resource_management/libraries/functions/security_commons.py
* (edit)
ambari-server/src/main/resources/common-services/OOZIE/4.0.0.2.0/package/scripts/oozie.py
> Use localjceks URL for credential provider for local files
> ----------------------------------------------------------
>
> Key: AMBARI-23106
> URL: https://issues.apache.org/jira/browse/AMBARI-23106
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent
> Affects Versions: 2.6.0
> Reporter: Zsombor Gegesy
> Priority: Major
> Labels: pull-request-available
> Time Spent: 3h
> Remaining Estimate: 0h
>
> Ambari generates 'jceks://file/\{filepath}' as a credential provider URL,
> which force using the JavaKeyStoreProvider - which uses the hdfs API to
> access the local file system.
> This cause problems, when the local file system access from that API is
> disabled - for security reasons, for example in Oozie. Fortunately, there is
> a LocalJavaKeyStoreProvider which can be used in this case, which can be
> accessed with a 'localjceks://file/\{filepath}' URL
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
