[
https://issues.apache.org/jira/browse/AMBARI-23526?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sandor Molnar updated AMBARI-23526:
-----------------------------------
Resolution: Fixed
Status: Resolved (was: Patch Available)
> Missing unlimited JCE policy installation on ambari-agent side
> --------------------------------------------------------------
>
> Key: AMBARI-23526
> URL: https://issues.apache.org/jira/browse/AMBARI-23526
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent, ambari-server
> Affects Versions: 2.7.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Blocker
> Labels: pull-request-available
> Fix For: 2.7.0
>
> Time Spent: 4h 40m
> Remaining Estimate: 0h
>
> *STR:*
> 1. install Ambari 2.7.0.0 (build #220) server/agents on Centos7 machines
> (this issue is not OS dependent)
> 2. install an HDP 3.0 cluster with HDFS
> 3. check if unlimited JCE policy has been installed on the hosts where only
> ambari-agent has been installed:
> {code}
> [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar
> /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu
> {code}
> *Result:*
> {code}
> [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar
> /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu
> Unlimited Key JCE Policy: false
> {code}
> *Expected result:*
> {code}
> [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar
> /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu
> Unlimited Key JCE Policy: true
> {code}
> *Additional information:*
> unlimited JCE policy in agent side is triggered by a hook:
> ambari-server/src/main/resources/stack-hooks/before-START/scripts/hook.py:38
> ->
> ambari-server/src/main/resources/stack-hooks/before-START/scripts/shared_initialization.py
> In this Python code we check if we really need to install unlimited JCE:
> {code}
> elif not params.unlimited_key_jce_required:
> Logger.debug("Skipping unlimited key JCE policy check and setup since it
> is not required")
> {code}
> This parameter is being set in params_linux.py:
> {code}
> unlimited_key_jce_required =
> default("/componentLevelParams/unlimited_key_jce_required", False)
> {code}
> However
> org/apache/ambari/server/controller/AmbariManagementControllerImpl.java:2590
> sets it in the host level parameters (and not in component level params)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
