ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Robert Levas (JIRA)" <>
Subject [jira] [Created] (AMBARI-9917) Kerberos: Add Host did not generate keytabs
Date Wed, 04 Mar 2015 02:38:04 GMT
Robert Levas created AMBARI-9917:

             Summary: Kerberos: Add Host did not generate keytabs
                 Key: AMBARI-9917
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.0.0
            Reporter: Robert Levas
            Assignee: Robert Levas
            Priority: Critical
             Fix For: 2.0.0

1) using build 440
2) three node cluster, hdfs, yarn, mr, tez, hive, zk, pig, ams
3) setup nnha, rmha
4) enabled kerb
5) all is good
6) added second hive metastore
7) added second hiveserver2
8) all is good
9) added host with DN and clients
10) keytabs are not created on the new host. i was not prompted for kdc creds. basically,
i did 1-9 all in one shot, never logging out.

As a workaround #1:
- Attempted to regen keytabs, with "missing only" checkbox checked. it looks like it remade
all principals and keytabs for the cluster but didn't distribute the keytabs. That is concerning
that this might be an additional issue for another JIRA maybe. Anycase: didn't result in getting
keytabs on my new host.

As a workaround #2:
- Attempted regen keytabs all. Made all princs and keytabs and distributed for cluster hosts
except my new host. So no lock here either.

This message was sent by Atlassian JIRA

View raw message