hadoop-common-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Akira AJISAKA (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (HADOOP-12860) Expand section "Data Encryption on HTTP" in SecureMode documentation
Date Fri, 04 Mar 2016 07:46:40 GMT

    [ https://issues.apache.org/jira/browse/HADOOP-12860?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15179522#comment-15179522

Akira AJISAKA commented on HADOOP-12860:

Thanks [~jojochuang] for creating the patch. I have three comments:
To enable SSL for web console of HDFS daemons, set `dfs.http.policy` to either `HTTPS_ONLY`
or `HTTP_AND_HTTPS` in hdfs-site.xml.

To enable SSL for web console of YARN daemons, set `yarn.http.policy` to `HTTPS_ONLY` in yarn-site.xml.

To enable SSL for web console of MapReduce JobHistory server, set `mapreduce.jobhistory.http.policy`
to `HTTPS_ONLY` in mapred-site.xml.
The patch says {{HTTP_AND_HTTPS}} does not work in MapReduce JHS and YARN daemons, which contradicts
Note that the selection between the HTTP and HTTPS binding is made in the `TimelineClient`
upon the value of the YARN-wide configuration option `yarn.http.policy`; the HTTPS endpoint
will be
selected if this policy is either of `HTTPS_ONLY` or `HTTP_AND_HTTPS`.
If the patch is right, we should fix TimelineServer.md as well.

2. The patch need to be rebased.
3. Would you document that "dfs.namenode.https-address" and "yarn.resourcemanager.webapp.https.address"
are the parameter for non-HA? In HA environment, we need <nn_id>/<rm_id> after
the parameters.

> Expand section "Data Encryption on HTTP" in SecureMode documentation
> --------------------------------------------------------------------
>                 Key: HADOOP-12860
>                 URL: https://issues.apache.org/jira/browse/HADOOP-12860
>             Project: Hadoop Common
>          Issue Type: Improvement
>    Affects Versions: 2.7.2
>            Reporter: Wei-Chiu Chuang
>            Assignee: Wei-Chiu Chuang
>            Priority: Minor
>              Labels: documentation
>         Attachments: HADOOP-12860.001.patch, HADOOP-12860.002.patch
> Section {{Data Encryption on HTTP}} in _Hadoop in Secure Mode_ should be be expanded
to talk about configurations needed to enable SSL for web UI of HDFS/YARN/MapReduce daemons.

This message was sent by Atlassian JIRA

View raw message