ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-8307) Perm 400 for spnego keytab, unable to start webhcat
Date Thu, 13 Nov 2014 15:47:35 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-8307?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14209926#comment-14209926
] 

Hudson commented on AMBARI-8307:
--------------------------------

SUCCESS: Integrated in Ambari-branch-1.7.0-docker #159 (See [https://builds.apache.org/job/Ambari-branch-1.7.0-docker/159/])
AMBARI-8307 Perm 400 for spnego keytab, unable to start webhcat. (atkach) (atkach: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=e9fbad71c1ea5221afad82a591dcede92d97f217)
* ambari-web/app/data/HDP2/secure_properties.js
* ambari-web/app/messages.js
* ambari-web/app/controllers/main/admin/security/add/step3.js


> Perm 400 for spnego keytab, unable to start webhcat
> ---------------------------------------------------
>
>                 Key: AMBARI-8307
>                 URL: https://issues.apache.org/jira/browse/AMBARI-8307
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-web
>    Affects Versions: 1.7.0
>            Reporter: Andrii Tkach
>            Assignee: Andrii Tkach
>            Priority: Blocker
>             Fix For: 1.7.0
>
>         Attachments: AMBARI-8307.patch, AMBARI-8307_branch-1.7.0.patch
>
>
> We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running
/var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).
> I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components.
 The spnego.service.keytab is 400 when it should be 440:
> {code}
> [hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab 
>   File: `/etc/security/keytabs/spnego.service.keytab'
>   Size: 4594      Blocks: 16         IO Block: 4096   regular file
> Device: fd00h/64768d	Inode: 538521      Links: 1
> Access: (0400/-r--------)  Uid: (  507/   storm)   Gid: (  500/  hadoop)
> Access: 2014-11-11 11:40:00.626724368 -0600
> Modify: 2014-11-11 09:19:39.000000000 -0600
> Change: 2014-11-11 09:21:58.773876115 -0600
> {code}
> After changing it manually to 440 I can start WebHCat. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message