ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Trevor McKay (JIRA)" <>
Subject [jira] [Commented] (AMBARI-1725) Check for iptables in should use firewalld.service on Fedora 18+
Date Fri, 06 Dec 2013 16:57:36 GMT


Trevor McKay commented on AMBARI-1725:

Okay, I tested this against the following:

RHEL 6.4
RHEL 5.10 (although there are major issues with the Python version unless you upgrade.  I
tested the essential code)
openSuse 13.1 (I do not have an SLES and didn't want to register an account)
ubuntu 12.04

See also which made changes around the same
issue (but left an incorrect warning on some platforms)

This code issues the firewall warning correctly for the above systems.  The classes make it
flexible enough that we can easily run whatever command we like and test the result however
we like on any system.  In fact, using classes like this can be a general model for other
tasks that ambari-server setup does -- it could be expanded with factories, etc.  Tough to
keep all the admin stuff working on multiple platforms without something like this, I think.

I strongly believe that if we are going to have a warning at all, an effort should be made
to make it correct on every plaform.  As a user, when a piece of software gives me a bad warning
I immediately think "I hope it gets everything else right!"  :) Better not to say anything
at all than create doubt.

Alternatively, release notes or user install docs could just issue a bold warning to users
that they need to deal with firewall issues, and the software could be silent.

> Check for iptables in should use firewalld.service on Fedora 18+
> ---------------------------------------------------------------------------------
>                 Key: AMBARI-1725
>                 URL:
>             Project: Ambari
>          Issue Type: Bug
>    Affects Versions: 1.4.1
>         Environment: trunk on F19
>            Reporter: Trevor McKay
>            Assignee: Trevor McKay
>            Priority: Minor
>         Attachments: AMBARI-1725.patch
> ambari-server setup uses "/sbin/service iptables status" to check the firewall service
and warn the user (with a special case for ubuntu).
> On Fedora 18+, the iptables service has been replaced with firewalld.

This message was sent by Atlassian JIRA

View raw message