Sandor Molnar created AMBARI-23526: -------------------------------------- Summary: Missing unlimited JCE policy installation on ambari-agent side Key: AMBARI-23526 URL: https://issues.apache.org/jira/browse/AMBARI-23526 Project: Ambari Issue Type: Bug Components: ambari-agent, ambari-server Affects Versions: 2.7.0 Reporter: Sandor Molnar Assignee: Sandor Molnar Fix For: 2.7.0
*STR:* 1. install Ambari 2.7.0.0 (build #220) server/agents on Centos7 machines (this issue is not OS dependent) 2. install an HDP 3.0 cluster with HDFS 3. check if unlimited JCE policy has been installed on the hosts where only ambari-agent has been installed: {code} [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu {code} *Result:* {code} [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu Unlimited Key JCE Policy: false {code} *Expected result:* {code} [root@c7402 ~]# /usr/jdk64/jdk1.8.0_112/bin/java -jar /var/lib/ambari-agent/tools/jcepolicyinfo.jar -tu Unlimited Key JCE Policy: true {code} *Additional information:* unlimited JCE policy in agent side is triggered by a hook: ambari-server/src/main/resources/stack-hooks/before-START/scripts/hook.py:38 -> ambari-server/src/main/resources/stack-hooks/before-START/scripts/shared_initialization.py In this Python code we check if we really need to install unlimited JCE: {code} elif not params.unlimited_key_jce_required: Logger.debug("Skipping unlimited key JCE policy check and setup since it is not required") {code} This parameter is being set in params_linux.py: {code} unlimited_key_jce_required = default("/componentLevelParams/unlimited_key_jce_required", False) {code} However org/apache/ambari/server/controller/AmbariManagementControllerImpl.java:2590 sets it in the host level parameters (and not in component level params) -- This message was sent by Atlassian JIRA (v7.6.3#76005)