[ https://issues.apache.org/jira/browse/AMBARI-23106?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16382571#comment-16382571 ]
Venkat Ranganathan commented on AMBARI-23106: --------------------------------------------- Left a review comment > Use localjceks URL for credential provider for local files > ---------------------------------------------------------- > > Key: AMBARI-23106 > URL: https://issues.apache.org/jira/browse/AMBARI-23106 > Project: Ambari > Issue Type: Bug > Components: ambari-agent > Affects Versions: 2.6.0 > Reporter: Zsombor Gegesy > Priority: Major > Labels: pull-request-available > Time Spent: 1.5h > Remaining Estimate: 0h > > Ambari generates 'jceks://file/\{filepath}' as a credential provider URL, > which force using the JavaKeyStoreProvider - which uses the hdfs API to > access the local file system. > This cause problems, when the local file system access from that API is > disabled - for security reasons, for example in Oozie. Fortunately, there is > a LocalJavaKeyStoreProvider which can be used in this case, which can be > accessed with a 'localjceks://file/\{filepath}' URL -- This message was sent by Atlassian JIRA (v7.6.3#76005)