[ 
https://issues.apache.org/jira/browse/AMBARI-23526?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

ASF GitHub Bot updated AMBARI-23526:
------------------------------------
    Labels: pull-request-available  (was: )

> Missing unlimited JCE policy installation on ambari-agent side
> --------------------------------------------------------------
>
>                 Key: AMBARI-23526
>                 URL: https://issues.apache.org/jira/browse/AMBARI-23526
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-agent, ambari-server
>    Affects Versions: 2.7.0
>            Reporter: Sandor Molnar
>            Assignee: Sandor Molnar
>            Priority: Blocker
>              Labels: pull-request-available
>             Fix For: 2.7.0
>
>
> *STR:*
> 1. install Ambari 2.7.0.0 (build #220) server/agents on Centos7 machines 
> (this issue is not OS dependent)
> 2. install an HDP 3.0 cluster with HDFS
> 3. check if unlimited JCE policy has been installed on the hosts where only 
> ambari-agent has been installed:
> {code}
> [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar 
> /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu
> {code}
> *Result:*
> {code}
> [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar 
> /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu
> Unlimited Key JCE Policy: false
> {code}
> *Expected result:*
> {code}
> [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar 
> /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu
> Unlimited Key JCE Policy: true
> {code}
> *Additional information:*
> unlimited JCE policy in agent side is triggered by a hook: 
> ambari-server/src/main/resources/stack-hooks/before-START/scripts/hook.py:38 
> -> 
> ambari-server/src/main/resources/stack-hooks/before-START/scripts/shared_initialization.py
> In this Python code we check if we really need to install unlimited JCE:
> {code}
>   elif not params.unlimited_key_jce_required:
>     Logger.debug("Skipping unlimited key JCE policy check and setup since it 
> is not required")
> {code}
> This parameter is being set in params_linux.py:
> {code}
> unlimited_key_jce_required = 
> default("/componentLevelParams/unlimited_key_jce_required", False)
> {code}
> However 
> org/apache/ambari/server/controller/AmbariManagementControllerImpl.java:2590 
> sets it in the host level parameters (and not in component level params)



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to