[
https://issues.apache.org/jira/browse/AMBARI-23106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16382422#comment-16382422
]
Robert Levas commented on AMBARI-23106:
---------------------------------------
[~venkatnrangan], Can you commend on this? Maybe take a look at the PR as
well? https://github.com/apache/ambari/pull/494
> Use localjceks URL for credential provider for local files
> ----------------------------------------------------------
>
> Key: AMBARI-23106
> URL: https://issues.apache.org/jira/browse/AMBARI-23106
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent
> Affects Versions: 2.6.0
> Reporter: Zsombor Gegesy
> Priority: Major
> Labels: pull-request-available
> Time Spent: 1.5h
> Remaining Estimate: 0h
>
> Ambari generates 'jceks://file/\{filepath}' as a credential provider URL,
> which force using the JavaKeyStoreProvider - which uses the hdfs API to
> access the local file system.
> This cause problems, when the local file system access from that API is
> disabled - for security reasons, for example in Oozie. Fortunately, there is
> a LocalJavaKeyStoreProvider which can be used in this case, which can be
> accessed with a 'localjceks://file/\{filepath}' URL
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
