[
https://issues.apache.org/jira/browse/AMBARI-14092?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Gautam Borad updated AMBARI-14092:
----------------------------------
Attachment: AMBARI-14092.patch
> Set yarn.resourcemanager.proxy-user-privileges.enabled to false in yarn-site
> when TDE is enabled
> ------------------------------------------------------------------------------------------------
>
> Key: AMBARI-14092
> URL: https://issues.apache.org/jira/browse/AMBARI-14092
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.1.3
> Reporter: Gautam Borad
> Assignee: Gautam Borad
> Fix For: 2.1.3
>
> Attachments: AMBARI-14092.patch
>
>
> *+Problem Statement+*
> The problem is that Resource Manager automatically request the hdfs token on
> app submission if "yarn.resourcemanager.proxy-user-privileges.enabled" is
> true.
> When requesting hdfs token, since KMS is enabled, it also requests the KMS
> token along with hdfs token (the code assumes this). This operation failed
> because RM does not have the privilege to request the kms token on user's
> behalf.
> *+Solution+*
> “yarn.resourcemanager.proxy-user-privileges.enabled” in yarn-site.xml needs
> to be set to false, if TDE is enabled.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
