[
https://issues.apache.org/jira/browse/OOZIE-2033?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15263608#comment-15263608
]
Venkat Sambath commented on OOZIE-2033:
---------------------------------------
[~rkanter] Over the "Additional considerations for Oozie HA with SSL"
Option 1) suggests that for self-signed certificate, the cert needs to be
imported to the Jobtracker/ResourceManager node alone. But This is not working
unless I install the certificates to all nodemanager nodes
(/usr/java/jdk/jre/lib/security/cacerts). Since the callback notification gets
triggered from AM to the load balancer https address and the AM can be run from
any node where the nodemanager is running. Can the document be changed to
include JobTracker/Nodemanager instead of Jobtracker/ResourceManager ?
Thank you
> HA and misc improvements to SSL docs
> ------------------------------------
>
> Key: OOZIE-2033
> URL: https://issues.apache.org/jira/browse/OOZIE-2033
> Project: Oozie
> Issue Type: Improvement
> Components: docs, HA, security
> Affects Versions: 4.0.1
> Reporter: Robert Kanter
> Assignee: Robert Kanter
> Fix For: 4.1.0
>
> Attachments: OOZIE-2033.patch
>
>
> We were recently looking into using Oozie HA with Kerberos with SSL (I know,
> that's crazy) and ran into some trickiness. We've figured it out, but
> there's some information that would be good to know when using HA with SSL.
> I've also got some other misc improvements for the SSL docs.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
