[HDFS-8451] DFSClient probe for encryption testing interprets empty URI property for "enabled"

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 2.7.1
• Fix Version/s: 2.8.0, 2.7.1, 3.0.0-alpha1
• Component/s: encryption
• Target Version/s: 2.7.1
• Hadoop Flags: Reviewed
• Assignee: Steve Loughran
• Reporter: Steve Loughran
• Created: 21/May/15 09:47
• Updated: 05/Jan/17 22:40
• Resolved: 21/May/15 19:59

Description

HDFS-7931 added a check in DFSClient for encryption isHDFSEncryptionEnabled(), looking for the property {{"dfs.encryption.key.provider.uri"}.

This probe returns true even if the property is empty.

If there is an empty provider.uri property, you get an NPE when a YARN client tries to set up the tokens to deploy an AM.

Issue Links

• is broken by: HDFS-7931 DistributedFIleSystem should not look for keyProvider in cache if Encryption is disabled