Uploaded image for project: 'Ambari'
  1. Ambari
  2. AMBARI-12920

“Oozie Quick links" in Ambari points to incorrect URL after enabling SSL

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 2.1.1
    • Fix Version/s: 2.1.2
    • Component/s: ambari-web
    • Labels:
      None

      Description

      after enabling the SSL on oozie server, the “Quick links" in Ambari points to incorrect URL.

      1. AMBARI-12920_Additional.patch
        1 kB
        Antonenko Alexander
      2. AMBARI-12920.patch
        2 kB
        Antonenko Alexander

        Issue Links

          Activity

          Hide
          onechiporenko Oleg Nechiporenko added a comment -

          +1 for patch

          Show
          onechiporenko Oleg Nechiporenko added a comment - +1 for patch
          Hide
          aantonenko Antonenko Alexander added a comment -

          committed to trunk and branch-2.1

          Show
          aantonenko Antonenko Alexander added a comment - committed to trunk and branch-2.1
          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Ambari-trunk-Commit #3346 (See https://builds.apache.org/job/Ambari-trunk-Commit/3346/)
          AMBARI-12920. “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=3bccd97a78e7c10c6e93d2e157bed267fe2ecae4)

          • ambari-web/app/views/common/quick_view_link_view.js
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Ambari-trunk-Commit #3346 (See https://builds.apache.org/job/Ambari-trunk-Commit/3346/ ) AMBARI-12920 . “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=3bccd97a78e7c10c6e93d2e157bed267fe2ecae4 ) ambari-web/app/views/common/quick_view_link_view.js
          Hide
          hudson Hudson added a comment -

          ABORTED: Integrated in Ambari-branch-2.1 #442 (See https://builds.apache.org/job/Ambari-branch-2.1/442/)
          AMBARI-12920. “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=a2ed53375dcff1d1b74721f683aa3248611e8b59)

          • ambari-web/app/views/common/quick_view_link_view.js
          Show
          hudson Hudson added a comment - ABORTED: Integrated in Ambari-branch-2.1 #442 (See https://builds.apache.org/job/Ambari-branch-2.1/442/ ) AMBARI-12920 . “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=a2ed53375dcff1d1b74721f683aa3248611e8b59 ) ambari-web/app/views/common/quick_view_link_view.js
          Hide
          risdenk Kevin Risden added a comment -

          Any reason the logic from AMBARI-11058 wasn't followed for the Oozie Quick links? This patch looks like it checks the oozie base url for 11443 (hardcoded) instead of the oozie.https.port.

          Show
          risdenk Kevin Risden added a comment - Any reason the logic from AMBARI-11058 wasn't followed for the Oozie Quick links? This patch looks like it checks the oozie base url for 11443 (hardcoded) instead of the oozie.https.port.
          Hide
          aantonenko Antonenko Alexander added a comment -

          Kevin Risden This was made because it's the only way to understand that we enabled ssl.

          I'm not receiving property that you mentioned (oozie.https.port)

          After enabling ssl using instruction: http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.1.7/bk_Security_Guide/content/ch_wire-oozie.html, here are oozie properties that I get:

          {
            "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations",
            "items" : [
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/content",
                "StackConfigurations" : {
                  "property_name" : "content",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.authentication.kerberos.name.rules",
                "StackConfigurations" : {
                  "property_name" : "oozie.authentication.kerberos.name.rules",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.authentication.simple.anonymous.allowed",
                "StackConfigurations" : {
                  "property_name" : "oozie.authentication.simple.anonymous.allowed",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.authentication.type",
                "StackConfigurations" : {
                  "property_name" : "oozie.authentication.type",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.base.url",
                "StackConfigurations" : {
                  "property_name" : "oozie.base.url",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.credentials.credentialclasses",
                "StackConfigurations" : {
                  "property_name" : "oozie.credentials.credentialclasses",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.db.schema.name",
                "StackConfigurations" : {
                  "property_name" : "oozie.db.schema.name",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.AuthorizationService.security.enabled",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.AuthorizationService.security.enabled",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.HadoopAccessorService.hadoop.configurations",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.HadoopAccessorService.hadoop.configurations",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.HadoopAccessorService.kerberos.enabled",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.HadoopAccessorService.kerberos.enabled",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.driver",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.JPAService.jdbc.driver",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.password",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.JPAService.jdbc.password",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.url",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.JPAService.jdbc.url",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.username",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.JPAService.jdbc.username",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.URIHandlerService.uri.handlers",
                "StackConfigurations" : {
                  "property_name" : "oozie.service.URIHandlerService.uri.handlers",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.services.ext",
                "StackConfigurations" : {
                  "property_name" : "oozie.services.ext",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_admin_port",
                "StackConfigurations" : {
                  "property_name" : "oozie_admin_port",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_admin_users",
                "StackConfigurations" : {
                  "property_name" : "oozie_admin_users",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_data_dir",
                "StackConfigurations" : {
                  "property_name" : "oozie_data_dir",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_database",
                "StackConfigurations" : {
                  "property_name" : "oozie_database",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_derby_database",
                "StackConfigurations" : {
                  "property_name" : "oozie_derby_database",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_heapsize",
                "StackConfigurations" : {
                  "property_name" : "oozie_heapsize",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_log_dir",
                "StackConfigurations" : {
                  "property_name" : "oozie_log_dir",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_permsize",
                "StackConfigurations" : {
                  "property_name" : "oozie_permsize",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_pid_dir",
                "StackConfigurations" : {
                  "property_name" : "oozie_pid_dir",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              },
              {
                "href" : "http://c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_user",
                "StackConfigurations" : {
                  "property_name" : "oozie_user",
                  "service_name" : "OOZIE",
                  "stack_name" : "HDP",
                  "stack_version" : "2.3"
                }
              }
            ]
          }
          

          Actually I'm not seeing any oozie.https.* properties. So oozie base url and port inside that property was the only to understand we enabled ssl

          Show
          aantonenko Antonenko Alexander added a comment - Kevin Risden This was made because it's the only way to understand that we enabled ssl. I'm not receiving property that you mentioned (oozie.https.port) After enabling ssl using instruction: http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.1.7/bk_Security_Guide/content/ch_wire-oozie.html , here are oozie properties that I get: { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations" , "items" : [ { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/content" , "StackConfigurations" : { "property_name" : "content" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.authentication.kerberos.name.rules" , "StackConfigurations" : { "property_name" : "oozie.authentication.kerberos.name.rules" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.authentication.simple.anonymous.allowed" , "StackConfigurations" : { "property_name" : "oozie.authentication.simple.anonymous.allowed" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.authentication.type" , "StackConfigurations" : { "property_name" : "oozie.authentication.type" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.base.url" , "StackConfigurations" : { "property_name" : "oozie.base.url" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.credentials.credentialclasses" , "StackConfigurations" : { "property_name" : "oozie.credentials.credentialclasses" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.db.schema.name" , "StackConfigurations" : { "property_name" : "oozie.db.schema.name" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.AuthorizationService.security.enabled" , "StackConfigurations" : { "property_name" : "oozie.service.AuthorizationService.security.enabled" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.HadoopAccessorService.hadoop.configurations" , "StackConfigurations" : { "property_name" : "oozie.service.HadoopAccessorService.hadoop.configurations" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.HadoopAccessorService.kerberos.enabled" , "StackConfigurations" : { "property_name" : "oozie.service.HadoopAccessorService.kerberos.enabled" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.driver" , "StackConfigurations" : { "property_name" : "oozie.service.JPAService.jdbc.driver" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.password" , "StackConfigurations" : { "property_name" : "oozie.service.JPAService.jdbc.password" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.url" , "StackConfigurations" : { "property_name" : "oozie.service.JPAService.jdbc.url" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.JPAService.jdbc.username" , "StackConfigurations" : { "property_name" : "oozie.service.JPAService.jdbc.username" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.service.URIHandlerService.uri.handlers" , "StackConfigurations" : { "property_name" : "oozie.service.URIHandlerService.uri.handlers" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie.services.ext" , "StackConfigurations" : { "property_name" : "oozie.services.ext" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_admin_port" , "StackConfigurations" : { "property_name" : "oozie_admin_port" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_admin_users" , "StackConfigurations" : { "property_name" : "oozie_admin_users" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_data_dir" , "StackConfigurations" : { "property_name" : "oozie_data_dir" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_database" , "StackConfigurations" : { "property_name" : "oozie_database" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_derby_database" , "StackConfigurations" : { "property_name" : "oozie_derby_database" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_heapsize" , "StackConfigurations" : { "property_name" : "oozie_heapsize" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_log_dir" , "StackConfigurations" : { "property_name" : "oozie_log_dir" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_permsize" , "StackConfigurations" : { "property_name" : "oozie_permsize" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_pid_dir" , "StackConfigurations" : { "property_name" : "oozie_pid_dir" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } }, { "href" : "http: //c6401.ambari.apache.org:8080/api/v1/stacks/HDP/versions/2.3/services/OOZIE/configurations/oozie_user" , "StackConfigurations" : { "property_name" : "oozie_user" , "service_name" : "OOZIE" , "stack_name" : "HDP" , "stack_version" : "2.3" } } ] } Actually I'm not seeing any oozie.https.* properties. So oozie base url and port inside that property was the only to understand we enabled ssl
          Hide
          risdenk Kevin Risden added a comment -

          AMBARI-11058 requires that oozie.https.port, oozie.https.keystore.file, and oozie.https.keystore.pass for Oozie SSL. It makes Ambari prepare the Oozie WAR file with "-secure". Following the steps from the HDP 2.1.7 guide doesn't work with Ambari because Ambari does a prepare war every time Oozie is restarted. Without the oozie.https.* properties Ambari doesn't know to prepare the Oozie WAR with "-secure". The oozie.https.* properties must be added to Oozie configs through Ambari.

          Show
          risdenk Kevin Risden added a comment - AMBARI-11058 requires that oozie.https.port, oozie.https.keystore.file, and oozie.https.keystore.pass for Oozie SSL. It makes Ambari prepare the Oozie WAR file with "-secure". Following the steps from the HDP 2.1.7 guide doesn't work with Ambari because Ambari does a prepare war every time Oozie is restarted. Without the oozie.https.* properties Ambari doesn't know to prepare the Oozie WAR with "-secure". The oozie.https.* properties must be added to Oozie configs through Ambari.
          Hide
          aantonenko Antonenko Alexander added a comment -

          So you mean this properties needs to be added by hand/manually ? Can you please point me to right instruction/guide where I can read about that.

          And what if user enabled ssl but did not added this properties ? he will get wrong link, right ?

          Show
          aantonenko Antonenko Alexander added a comment - So you mean this properties needs to be added by hand/manually ? Can you please point me to right instruction/guide where I can read about that. And what if user enabled ssl but did not added this properties ? he will get wrong link, right ?
          Hide
          risdenk Kevin Risden added a comment -

          The best documentation I've found is from the JIRA AMBARI-11058. There is also the original Oozie SSL for Ambari JIRA AMBARI-10936. The comments from AMBARI-11058 explain why Oozie base url should not be used as an indicator of Oozie SSL status.

          Show
          risdenk Kevin Risden added a comment - The best documentation I've found is from the JIRA AMBARI-11058 . There is also the original Oozie SSL for Ambari JIRA AMBARI-10936 . The comments from AMBARI-11058 explain why Oozie base url should not be used as an indicator of Oozie SSL status.
          Hide
          aantonenko Antonenko Alexander added a comment -

          Thanks for info!
          And once again, your suggestion that we should determine that ssl is enabled based on oozie.https.port has downsides -> user will enable ssl but simply will not manually add oozie.https.port property, and he will get wrong link, because of that. Correct me if I'm wrong.

          Show
          aantonenko Antonenko Alexander added a comment - Thanks for info! And once again, your suggestion that we should determine that ssl is enabled based on oozie.https.port has downsides -> user will enable ssl but simply will not manually add oozie.https.port property, and he will get wrong link, because of that. Correct me if I'm wrong.
          Hide
          risdenk Kevin Risden added a comment -

          How will the user enable Oozie SSL through Ambari without adding the oozie.https.port? There is no way for the end user to enable Oozie SSL without doing the "prepare-war -secure" step through Ambari with the oozie.https.port.

          Show
          risdenk Kevin Risden added a comment - How will the user enable Oozie SSL through Ambari without adding the oozie.https.port? There is no way for the end user to enable Oozie SSL without doing the "prepare-war -secure" step through Ambari with the oozie.https.port.
          Hide
          aantonenko Antonenko Alexander added a comment -

          By following this guide http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.1.7/bk_Security_Guide/content/ch_wire-oozie.html -> Change the Oozie environment variables for HTTPS if required
          This "if required" makes it possible that we will not have this properties. I was able to enabled ssl without setting this properties, by simply skipping #2 instruction.

          Show
          aantonenko Antonenko Alexander added a comment - By following this guide http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.1.7/bk_Security_Guide/content/ch_wire-oozie.html -> Change the Oozie environment variables for HTTPS if required This "if required" makes it possible that we will not have this properties. I was able to enabled ssl without setting this properties, by simply skipping #2 instruction.
          Hide
          risdenk Kevin Risden added a comment -

          Yea thats fair. Maybe this is a question for the Oozie team about why "oozie-setup.sh prepare-war -secure" is required for Oozie SSL. Only setting the Oozie environment variables won't run the "prepare-war -secure" step.

          Show
          risdenk Kevin Risden added a comment - Yea thats fair. Maybe this is a question for the Oozie team about why "oozie-setup.sh prepare-war -secure" is required for Oozie SSL. Only setting the Oozie environment variables won't run the "prepare-war -secure" step.
          Hide
          aantonenko Antonenko Alexander added a comment -

          Reopening to make additional commit, that will also cover cases when we have oozie.https.* properties.

          Show
          aantonenko Antonenko Alexander added a comment - Reopening to make additional commit, that will also cover cases when we have oozie.https.* properties.
          Hide
          ababiichuk Andrii Babiichuk added a comment -

          +1 for the patch

          Show
          ababiichuk Andrii Babiichuk added a comment - +1 for the patch
          Hide
          hadoopqa Hadoop QA added a comment -

          -1 overall. Here are the results of testing the latest attachment
          http://issues.apache.org/jira/secure/attachment/12753533/AMBARI-12920_Additional.patch
          against trunk revision .

          -1 patch. The patch command could not apply the patch.

          Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3692//console

          This message is automatically generated.

          Show
          hadoopqa Hadoop QA added a comment - -1 overall . Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12753533/AMBARI-12920_Additional.patch against trunk revision . -1 patch . The patch command could not apply the patch. Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3692//console This message is automatically generated.
          Hide
          aantonenko Antonenko Alexander added a comment -

          committed to trunk and branch 2.1

          Show
          aantonenko Antonenko Alexander added a comment - committed to trunk and branch 2.1
          Hide
          hudson Hudson added a comment -

          FAILURE: Integrated in Ambari-branch-2.1 #458 (See https://builds.apache.org/job/Ambari-branch-2.1/458/)
          AMBARI-12920. “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL. Additional fix (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=abb437c184f377ab8b83518291fe6f7e33c67e25)

          • ambari-web/app/views/common/quick_view_link_view.js
          Show
          hudson Hudson added a comment - FAILURE: Integrated in Ambari-branch-2.1 #458 (See https://builds.apache.org/job/Ambari-branch-2.1/458/ ) AMBARI-12920 . “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL. Additional fix (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=abb437c184f377ab8b83518291fe6f7e33c67e25 ) ambari-web/app/views/common/quick_view_link_view.js
          Hide
          hudson Hudson added a comment -

          SUCCESS: Integrated in Ambari-trunk-Commit #3365 (See https://builds.apache.org/job/Ambari-trunk-Commit/3365/)
          AMBARI-12920. “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL. Additional fix (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=9a05ae6a9b630b3873784fa25e84b333c98ebbcf)

          • ambari-web/app/views/common/quick_view_link_view.js
          Show
          hudson Hudson added a comment - SUCCESS: Integrated in Ambari-trunk-Commit #3365 (See https://builds.apache.org/job/Ambari-trunk-Commit/3365/ ) AMBARI-12920 . “Oozie Quick links" in Ambari points to incorrect URL after enabling SSL. Additional fix (alexantonenko) (hiveww: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=9a05ae6a9b630b3873784fa25e84b333c98ebbcf ) ambari-web/app/views/common/quick_view_link_view.js

            People

            • Assignee:
              aantonenko Antonenko Alexander
              Reporter:
              aantonenko Antonenko Alexander
            • Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Development