ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Srimanth Gunturi (JIRA)" <j...@apache.org>
Subject [jira] [Assigned] (AMBARI-9556) Knox installation does not create correct gateway-identity cert
Date Tue, 17 Feb 2015 20:53:11 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-9556?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Srimanth Gunturi reassigned AMBARI-9556:
----------------------------------------

    Assignee: Srimanth Gunturi

> Knox installation does not create correct gateway-identity cert
> ---------------------------------------------------------------
>
>                 Key: AMBARI-9556
>                 URL: https://issues.apache.org/jira/browse/AMBARI-9556
>             Project: Ambari
>          Issue Type: Bug
>          Components: stacks
>    Affects Versions: 2.0.0
>            Reporter: Sumit Gupta
>            Assignee: Srimanth Gunturi
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-9556.patch
>
>
> During startup of knox (after install), a cert file is generated using the knoxcli tool
and passing in the hostname that knox is on. There is a check for this generation to occur
if it hasn't been done before. The check is for the existance of the gateway cert store file.
This is done correctly in Ambari 1.7 but the check in 2.x is now against the wrong file. This
results in the command never getting executed and the knox server creating a default cert
on startup which has 'localhost' in it as the CN instead of the actual hostname.
> This commit shows where the correct check is lost. 
> https://git-wip-us.apache.org/repos/asf?p=ambari.git;a=blobdiff;f=ambari-server/src/main/resources/stacks/HDP/2.2/services/KNOX/package/scripts/knox.py;h=7d7d20cc53df4866cfb5bb90171998edcfbcc549;hp=627462ae06a321248085d4d6e6428a780a924aa1;hb=6ed4fe4508cf7b1927bacca29a5b85f89b86746a;hpb=45468b65af0f731cd14c2ad0516bba9f7cddf217



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message