[AMBARI-18071] Ambari Files View needs to have ability to load security configurations

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: trunk
• Component/s: contrib
• Assignee: Keta Patel
• Reporter: Keta Patel
• Created: 08/Aug/16 23:38
• Updated: 09/Sep/16 18:44
• Resolved: 09/Sep/16 14:58

Description

When HDFS is configured with Encryption Zones, Files View to browser files will give "No KeyProvider" error.

Steps to reproduce this issue:
1. Configure an encrypted zone in HDFS (Transparent Data Encryption). You can follow the link https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_hdfs_admin_tools/content/ch_configuring_hdfs_encryption.html
I have used Hadoop's KMS (installed tar manually).
2. Create a Files View instance and provide a user/group the privilege to use the instance.
3. Log into the Ambari console as the user with the Files View permission.
4. Open the Files View instance.
5. Go to the folder which is configured as an encrypted zone.
6. Try to open an existing file in this folder.
7. This throws an error - java.io.IOException: No KeyProvider is configured, cannot access an encrypted file.
8. When trying through the shell, opening this file works.

This happens because Files View doesn't have enough configuration set to browse secured zone. Files view doesn't even provide an option to add these configurations.This is why we see errors "No KeyProvider is configured, cannot access an encrypted file", to work around this, you could download client configuration from HDFS service tab, and copy the core-site.xml and hdfs-site.xml files to /etc/ambari-server/conf, then restart ambari-server. After this, the user is able to open the file in the encrypted zone.

Issue Links

• links to: ReviewBoard