[AMBARI-20196] Ambari should install the unlimited key JCE policy based on service requirements even if cluster is not Kerberized

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.4.0
• Fix Version/s: 2.5.0
• Component/s: ambari-agent, ambari-server
• Labels: encryption jce_policy kerberos
• Assignee: Robert Levas
• Reporter: Robert Levas
• Created: 25/Feb/17 22:12
• Updated: 27/Feb/17 21:16
• Resolved: 27/Feb/17 19:53

Description

Ambari should install the unlimited key JCE policy based on service requirements even if cluster is not Kerberized. For example, if a service needs the unlimited key JCE policy for an encryption task not related to Kerberos.

On a similar note, the unlimited key JCE policy is not being distributed to the agents if Kerberos is enabled using the "manual" option - as opposed to integrating with an existing KDC.

On a related note, Ambari Server host automatically unpacks JCE unlimited during "ambari-server setup" (unless custom JDK is used).

Issue Links

• links to: ReviewBoard