ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas" <rle...@hortonworks.com>
Subject Review Request 30182: MapReduce2 Service Check fails after enabling Kerberos with permission issue in local filesystem
Date Thu, 22 Jan 2015 20:11:56 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/30182/
-----------------------------------------------------------

Review request for Ambari, Jaimin Jetly and Yusaku Sako.


Bugs: AMBARI-9279
    https://issues.apache.org/jira/browse/AMBARI-9279


Repository: ambari


Description
-------

After enabling Kerberos MapReduce2 Service Check failed with issue writing to local file system.
 This fix attempts to set the ACLs on the relevant directories to solve this issue:

Before Kerberos
```
drwxrwxr-x 5 yarn hadoop 4096 Jan 22 00:01 /hadoop/yarn/local
drwxr-xr-x 3 yarn hadoop 4096 Jan 22 00:00 /hadoop/yarn/local/usercache
drwxr-x--- 4 yarn hadoop 4096 Jan 22 00:00 /hadoop/yarn/local/usercache/ambari-qa
drwx--x--- 2 yarn hadoop 4096 Jan 22 00:01 /hadoop/yarn/local/usercache/ambari-qa/appcache
```

After Kerberos:
```
drwxrwxr-x 5 yarn hadoop 4096 Jan 22 01:23 /hadoop/yarn/local
drwxr-xr-x 3 yarn hadoop 4096 Jan 22 00:00 /hadoop/yarn/local/usercache
drwxr-s--- 4 ambari-qa hadoop 4096 Jan 22 00:00 /hadoop/yarn/local/usercache/ambari-qa
drwx--x--- 2 yarn hadoop 4096 Jan 22 00:01 /hadoop/yarn/local/usercache/ambari-qa/appcache
```

This fix updates `/hadoop/yarn/local/usercache/ambari-qa/appcache` from 
```
drwx--x--- 2 yarn hadoop 4096 Jan 22 00:01 /hadoop/yarn/local/usercache/ambari-qa/appcache
```
to 
```
drwx--x--- 2 ambari-qa hadoop 4096 Jan 22 00:01 /hadoop/yarn/local/usercache/ambari-qa/appcache
```


Diffs
-----

  ambari-server/src/main/resources/common-services/YARN/2.1.0.2.0/package/scripts/yarn.py
3bd4825 
  ambari-server/src/test/python/stacks/2.0.6/YARN/test_nodemanager.py fbf01c6 

Diff: https://reviews.apache.org/r/30182/diff/


Testing
-------

Manaual testing in test cluster

**Waiting for Jenkins tests to complete**


Thanks,

Robert Levas


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message