[AMBARI-13696] HDFS has issues after enabling wire encryption and reconfiguring DATANODEs

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Component/s: ambari-server
• Assignee: Dmitry Lysnichenko
• Reporter: Dmitry Lysnichenko
• Created: 03/Nov/15 14:47
• Updated: 03/Nov/15 17:29
• Resolved: 03/Nov/15 15:08

Description

Steps:

1. Deployed cluster.
2. Enabled security.
3. Enabled wire encryption.
4. Set up dfs.datanode.address to value <=1023.
5. Set up dfs.datahode.http.address to value <=1023.
6. Set up dfs.datahode.https.address to value > 1023.
7. Set up dfs.http.policy value to HTTP_AND_HTTPS.
8. Restart HDFS components.

Restart was failed with [^datanodeRestart.txt] for datanode.

After that was executed:

1. Set up dfs.datanode.address to use ports > 1023.
2. Set up dfs.datanode.https.address to use ports > 1023.
3. Set up dfs.data.transfer.protection to authentication.
4. Set up dfs.http.policy value to HTTPS_ONLY.
5. Restart HDFS components.

Restart was failed for datanode also.

Next steps:

1. Set up dfs.datanode.address to use ports > 1023.
2. Set up dfs.datanode.https.address to use ports > 1023.
3. Set up dfs.data.transfer.protection to integrity.
4. Set up dfs.http.policy value to HTTPS_ONLY.
5. Restart HDFS components.

Restart was passed.

Next steps:

1. Set up dfs.datanode.address to use ports <= 1023.
2. Set up dfs.datanode.http.address to use ports <= 1023.
3. Set up dfs.http.policy value to HTTP_ONLY.
4. Delete dfs.data.transfer.protection.
5. Restart HDFS components.

Restart was failed with [^namenodeStart.txt] for namenode.
Now NameNode can not to be restarted/started.

Issue Links

• links to: review_request_