ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrii Tkach" <atk...@hortonworks.com>
Subject Review Request 27988: Perm 400 for spnego keytab, unable to start webhcat
Date Thu, 13 Nov 2014 13:53:01 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/27988/
-----------------------------------------------------------

Review request for Ambari, Andriy Babiichuk, Aleksandr Kovalenko, and Yusaku Sako.


Bugs: AMBARI-8307
    https://issues.apache.org/jira/browse/AMBARI-8307


Repository: ambari


Description
-------

We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running
/var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).
I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components. The spnego.service.keytab
is 400 when it should be 440:
[hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab 
  File: `/etc/security/keytabs/spnego.service.keytab'
  Size: 4594      Blocks: 16         IO Block: 4096   regular file
Device: fd00h/64768d	Inode: 538521      Links: 1
Access: (0400/-r--------)  Uid: (  507/   storm)   Gid: (  500/  hadoop)
Access: 2014-11-11 11:40:00.626724368 -0600
Modify: 2014-11-11 09:19:39.000000000 -0600
Change: 2014-11-11 09:21:58.773876115 -0600
After changing it manually to 440 I can start WebHCat.


Diffs
-----

  ambari-web/app/controllers/main/admin/security/add/step3.js 32d3edc 
  ambari-web/app/data/HDP2/secure_properties.js 77cfc9a 
  ambari-web/app/messages.js af1523b 

Diff: https://reviews.apache.org/r/27988/diff/


Testing
-------

Tested manually


Thanks,

Andrii Tkach


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message