[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Haibo Chen updated MAPREDUCE-4669: -- Resolution: Fixed Hadoop Flags: Reviewed Status: Resolved (was: Patch Available) > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Attachments: MAPREDUCE-4669.001.patch, MAPREDUCE-4669.002.patch, > MAPREDUCE-4669.003.patch, MAPREDUCE-4669.004.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Haibo Chen updated MAPREDUCE-4669: -- Fix Version/s: 3.3.0 > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Fix For: 3.3.0 > > Attachments: MAPREDUCE-4669.001.patch, MAPREDUCE-4669.002.patch, > MAPREDUCE-4669.003.patch, MAPREDUCE-4669.004.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Kanter updated MAPREDUCE-4669: - Attachment: MAPREDUCE-4669.004.patch > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Attachments: MAPREDUCE-4669.001.patch, MAPREDUCE-4669.002.patch, > MAPREDUCE-4669.003.patch, MAPREDUCE-4669.004.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Kanter updated MAPREDUCE-4669: - Status: Patch Available (was: Open) > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Attachments: MAPREDUCE-4669.001.patch, MAPREDUCE-4669.002.patch, > MAPREDUCE-4669.003.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Kanter updated MAPREDUCE-4669: - Attachment: MAPREDUCE-4669.003.patch > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Attachments: MAPREDUCE-4669.001.patch, MAPREDUCE-4669.002.patch, > MAPREDUCE-4669.003.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Kanter updated MAPREDUCE-4669: - Attachment: MAPREDUCE-4669.002.patch > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Attachments: MAPREDUCE-4669.001.patch, MAPREDUCE-4669.002.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Kanter updated MAPREDUCE-4669: - Target Version/s: 3.3.0 > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Attachments: MAPREDUCE-4669.001.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Robert Kanter updated MAPREDUCE-4669: - Attachment: MAPREDUCE-4669.001.patch > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Robert Kanter >Priority: Major > Attachments: MAPREDUCE-4669.001.patch > > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v7.6.3#76005) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org
[jira] [Updated] (MAPREDUCE-4669) MRAM web UI does not work with HTTPS
[ https://issues.apache.org/jira/browse/MAPREDUCE-4669?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Haibo Chen updated MAPREDUCE-4669: -- Summary: MRAM web UI does not work with HTTPS (was: MRAM web UI over HTTPS does not work with Kerberos security enabled) > MRAM web UI does not work with HTTPS > > > Key: MAPREDUCE-4669 > URL: https://issues.apache.org/jira/browse/MAPREDUCE-4669 > Project: Hadoop Map/Reduce > Issue Type: Bug > Components: mr-am >Affects Versions: 2.0.3-alpha >Reporter: Alejandro Abdelnur >Assignee: Haibo Chen > > With Kerberos enable, the MRAM runs as the user that submitted the job, thus > the MRAM process cannot read the cluster keystore files to get the > certificates to start its HttpServer using HTTPS. > We need to decouple the keystore used by RM/NM/NN/DN (which are cluster > provided) from the keystore used by AMs (which ought to be user provided). -- This message was sent by Atlassian JIRA (v6.3.15#6346) - To unsubscribe, e-mail: mapreduce-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: mapreduce-issues-h...@hadoop.apache.org