[ 
https://issues.apache.org/jira/browse/HAWQ-266?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15067069#comment-15067069
 ] 

ASF GitHub Bot commented on HAWQ-266:
-------------------------------------

Github user ljainpivotalio commented on a diff in the pull request:

    https://github.com/apache/incubator-hawq/pull/203#discussion_r48192753
  
    --- Diff: tools/bin/hawq_ctl ---
    @@ -111,10 +111,13 @@ class HawqInit:
                 self.standby_host_name = ''
     
             if 'enable_secure_filesystem' in self.hawq_dict:
    -            
self.enable_secure_filesystem=self.hawq_dict['enable_secure_filesystem']
    -            self.krb_server_keyfile =self.hawq_dict['krb_server_keyfile']
    +            self.enable_secure_filesystem = 
self.hawq_dict['enable_secure_filesystem']
    --- End diff --
    
    **enable_secure_filesystem** could be set to **OFF** in hawq-site.xml. 
Current logic is assuming that security is on as long as 
enable_secure_filesystem parameter is present.


> Check if krb_server_keyfile exist in hawq-site.xml
> --------------------------------------------------
>
>                 Key: HAWQ-266
>                 URL: https://issues.apache.org/jira/browse/HAWQ-266
>             Project: Apache HAWQ
>          Issue Type: Bug
>          Components: Command Line Tools
>            Reporter: Radar Lei
>            Assignee: Lei Chang
>
> For security mode, currently if 'enable_secure_filesystem' exist, we assume 
> 'krb_server_keyfile' exist too.
> This will error out if we do not have 'krb_server_keyfile' in hawq-site.xml 
> while 'enable_secure_filesystem' exist.
> We should check 'krb_server_keyfile' value if 'enable_secure_filesystem' is 
> set to 'on'.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to