Re: Review Request 45541: AMBARI-15648 Ranger KMS server start fails due to missing JCE policies on non-kerberos cluster

[Alejandro Fernandez]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45541/#review126610
---


Ship it!




Ship It!

- Alejandro Fernandez


On March 31, 2016, 1:46 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/45541/
> ---
> 
> (Updated March 31, 2016, 1:46 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Jaimin Jetly, Jonathan 
> Hurley, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-15648
> https://issues.apache.org/jira/browse/AMBARI-15648
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Need to handle distribution of JCE policy at Ranger KMS server 
> start.(irrespective of Kerberos being enabled or disabled)
> Download JCE policy for default JDK installed by ambari-server host and 
> distribute on Ranger KMS server host and update it under 
> {java_home}/jre/lib/security
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py
>  2bfe54c 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms_server.py
>  478cf61 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/params.py
>  a849fd3 
> 
> Diff: https://reviews.apache.org/r/45541/diff/
> 
> 
> Testing
> ---
> 
> Installed Ranger KMS with both jdk 7 and 8 on centos6.
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 45541: AMBARI-15648 Ranger KMS server start fails due to missing JCE policies on non-kerberos cluster

[Mugdha Varadkar]

> On March 31, 2016, 5:51 p.m., Alejandro Fernandez wrote:
> > ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py,
> >  line 423
> > 
> >
> > Does this need to specify permissions and owner?

Since this directory will be created under '/var/lib/ambari-agent/tmp/', do I 
still need to provide permissions and owner ?


- Mugdha


---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45541/#review126370
---


On March 31, 2016, 1:46 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/45541/
> ---
> 
> (Updated March 31, 2016, 1:46 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Jaimin Jetly, Jonathan 
> Hurley, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-15648
> https://issues.apache.org/jira/browse/AMBARI-15648
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Need to handle distribution of JCE policy at Ranger KMS server 
> start.(irrespective of Kerberos being enabled or disabled)
> Download JCE policy for default JDK installed by ambari-server host and 
> distribute on Ranger KMS server host and update it under 
> {java_home}/jre/lib/security
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py
>  2bfe54c 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms_server.py
>  478cf61 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/params.py
>  a849fd3 
> 
> Diff: https://reviews.apache.org/r/45541/diff/
> 
> 
> Testing
> ---
> 
> Installed Ranger KMS with both jdk 7 and 8 on centos6.
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 45541: AMBARI-15648 Ranger KMS server start fails due to missing JCE policies on non-kerberos cluster

[Jayush Luniya]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45541/#review126419
---


Ship it!




Ship It!

- Jayush Luniya


On March 31, 2016, 1:46 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/45541/
> ---
> 
> (Updated March 31, 2016, 1:46 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Jaimin Jetly, Jonathan 
> Hurley, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-15648
> https://issues.apache.org/jira/browse/AMBARI-15648
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Need to handle distribution of JCE policy at Ranger KMS server 
> start.(irrespective of Kerberos being enabled or disabled)
> Download JCE policy for default JDK installed by ambari-server host and 
> distribute on Ranger KMS server host and update it under 
> {java_home}/jre/lib/security
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py
>  2bfe54c 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms_server.py
>  478cf61 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/params.py
>  a849fd3 
> 
> Diff: https://reviews.apache.org/r/45541/diff/
> 
> 
> Testing
> ---
> 
> Installed Ranger KMS with both jdk 7 and 8 on centos6.
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>

Re: Review Request 45541: AMBARI-15648 Ranger KMS server start fails due to missing JCE policies on non-kerberos cluster

[Alejandro Fernandez]

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/45541/#review126370
---




ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py
 (line 423)


Does this need to specify permissions and owner?


- Alejandro Fernandez


On March 31, 2016, 1:46 p.m., Mugdha Varadkar wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/45541/
> ---
> 
> (Updated March 31, 2016, 1:46 p.m.)
> 
> 
> Review request for Ambari, Alejandro Fernandez, Jaimin Jetly, Jonathan 
> Hurley, and Velmurugan Periasamy.
> 
> 
> Bugs: AMBARI-15648
> https://issues.apache.org/jira/browse/AMBARI-15648
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> Need to handle distribution of JCE policy at Ranger KMS server 
> start.(irrespective of Kerberos being enabled or disabled)
> Download JCE policy for default JDK installed by ambari-server host and 
> distribute on Ranger KMS server host and update it under 
> {java_home}/jre/lib/security
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms.py
>  2bfe54c 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/kms_server.py
>  478cf61 
>   
> ambari-server/src/main/resources/common-services/RANGER_KMS/0.5.0.2.3/package/scripts/params.py
>  a849fd3 
> 
> Diff: https://reviews.apache.org/r/45541/diff/
> 
> 
> Testing
> ---
> 
> Installed Ranger KMS with both jdk 7 and 8 on centos6.
> 
> 
> Thanks,
> 
> Mugdha Varadkar
> 
>