[ 
https://issues.apache.org/jira/browse/HADOOP-13638?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15514119#comment-15514119
 ] 

Wei-Chiu Chuang edited comment on HADOOP-13638 at 9/22/16 6:40 PM:
-------------------------------------------------------------------

v02: The Configuration object is shared by both KMS client and server in unit 
tests because UGI gets/sets it to a static variable. I don't see a way to 
isolate client's configuration from server. 

Fortunately, UGI-sensitive configuration names are independent between KMS 
client and server. As a workaround, make sure the client configurations are 
copied to the server's so that client can read them.


was (Author: jojochuang):
v02: The Configuration object is shared by both KMS client and server in unit 
tests because UGI gets/sets it to a static variable.

As a workaround, make sure the client configurations are copied to the server's 
so that client can read them.

> KMS should set UGI's Configuration object properly
> --------------------------------------------------
>
>                 Key: HADOOP-13638
>                 URL: https://issues.apache.org/jira/browse/HADOOP-13638
>             Project: Hadoop Common
>          Issue Type: Bug
>          Components: kms
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>         Attachments: HADOOP-13638.001.patch, HADOOP-13638.002.patch
>
>
> We found that the Configuration object in UGI in KMS server is not 
> initialized properly, therefore it does not load core-site.xml from 
> {{KMSConfiguration.KMS_CONFIG_DIR}}.
> This becomes a problem when the Hadoop cluster uses LdapGroupsMapping for 
> group resolution, because the UGI in KMS falls back to the default 
> JniBasedUnixGroupsMappingWithFallback (defined in core-default.xml) and is 
> thus not consistent with the Hadoop cluster.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to