[ https://issues.apache.org/jira/browse/HDFS-12052?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16081276#comment-16081276 ]
John Zhuge commented on HDFS-12052: ----------------------------------- Sorry for the confusion. The correct property name is {{httpfs.ssl.enabled}}. The property names are documented in doc and httpfs-default.xml. Environment variables are deprecated. HDFS-10860 made mistakes in using both hadoop.httpfs.ssl.enabled and httpfs.ssl.enabled. Filed HDFS-12114 to fix. For your patch, please use the following code: {code:java} conf.setBoolean(HttpFSServerWebServer.SSL_ENABLED_KEY, true); {code} You'd have to make {{HttpFSServerWebServer.SSL_ENABLED_KEY}} package private. > Set SWEBHDFS delegation token kind when ssl is enabled in HttpFS > ---------------------------------------------------------------- > > Key: HDFS-12052 > URL: https://issues.apache.org/jira/browse/HDFS-12052 > Project: Hadoop HDFS > Issue Type: Bug > Components: httpfs, webhdfs > Affects Versions: 2.7.3, 3.0.0-alpha3 > Reporter: Zoran Dimitrijevic > Assignee: Zoran Dimitrijevic > Attachments: HDFS-12052.00.patch, HDFS-12052.01.patch, > HDFS-12052.02.patch, HDFS-12052.03.patch, HDFS-12052.04.patch, > HDFS-12052.05.patch > > > When httpfs runs with httpfs.ssl.enabled it should return SWEBHDFS delegation > tokens. > Currently, httpfs returns WEBHDFS delegation "kind" for tokens regardless of > whether ssl is enabled or not. If clients directly connect to renew tokens > (for example, hdfs dfs) all works because httpfs doesn't check whether token > kind is for swebhdfs or webhdfs. However, this breaks when yarn rm needs to > renew the token for the job (for example, when running hadoop distcp). Since > DT kind is WEBHDFS, rm tries to establish non-ssl connection to httpfs and > fails. > I've tested a simple patch which I'll upload to this jira, and it fixes this > issue (hadoop distcp works). -- This message was sent by Atlassian JIRA (v6.4.14#64029) --------------------------------------------------------------------- To unsubscribe, e-mail: hdfs-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: hdfs-issues-h...@hadoop.apache.org