[HADOOP-12777] keystore password file is not looked up in Hadoop's configuration directory.

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.7.2, 3.0.0-alpha1
• Component/s: kms
• Assignee: Unassigned
• Reporter: Takashi Ohnishi
• Created: 06/Feb/16 15:31
• Updated: 25/Sep/16 16:32

Description

The KMS document note that the keystore password file configured by hadoop.security.keystore.java-keystore-provider.password-file is looked up in Hadoop's configuration directory, but actually it is not.

If setting it and put the password files on the configured path, KMS fails to start with the below error.

ERROR: Hadoop KMS could not be started

REASON: java.io.IOException: Password file does not exists

Stacktrace:
---------------------------------------------------
java.io.IOException: Password file does not exists

I have found the file can be picked up from $HADOOP_PREFIX/share/hadoop/kms/tomcat/webapps/kms/WEB-INF/classes/, which seems to be a tomcat classpath.