ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom Beerbower" <tbeerbo...@hortonworks.com>
Subject Re: Review Request 35751: Ambari agent temp directory has wrong permissions on ambari-server host
Date Tue, 23 Jun 2015 00:31:20 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35751/#review88883
-----------------------------------------------------------

Ship it!


Ship It!

- Tom Beerbower


On June 23, 2015, 12:09 a.m., Robert Levas wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35751/
> -----------------------------------------------------------
> 
> (Updated June 23, 2015, 12:09 a.m.)
> 
> 
> Review request for Ambari, Andrew Onischuk, Tom Beerbower, and Yusaku Sako.
> 
> 
> Bugs: AMBARI-12082
>     https://issues.apache.org/jira/browse/AMBARI-12082
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The Ambari agent temp directory (typically /var/lib/ambari-agent/data/tmp) has the incorrect
permissions on the Ambari server host. This is causing web alert errors on SUSE 11.3 for tests
 that do not run as root when Kerberos is enabled.  The issues appears to be masked on other
platforms. 
> 
> The permissions should be 777 but appear to be 655.
> 
> _Ambari server host_
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp
> drwxr-xr-x. 6 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> ```
> 
> _Ambari agent host_
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp
> drwxrwxrwx. 7 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> ```
> 
> An example of the related errror found in the alert message on a SUSE 11.3 cluster 
> ```
> Connection failed to http://HOST:50070 (Execution of '/usr/bin/kinit -l 5m -c /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f
-kt /etc/security/keytabs/spnego.service.keytab HTTP/HOST@EXAMPLE.COM > /dev/null' returned
1. kinit(v5): Credentials cache permissions incorrect when initializing cache /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f)
> ```
> 
> Errors are seen for HDFS and Yarn after Kerberos is enabled on the cluster. 
> 
> #Steps to reproduce:
> 1. Install ambari-sever and ambari-agent packages - `yum -y install ambari-agent ambari-server`
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> ```
> 2. Setup Ambari server - `ambari-server setup -s`
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> ```
> 3.  Start Ambari server - `ambari-server start`
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> ```
> 4. Create cluster
> -- After 'Confirm Hosts' page completes:  
> ```
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxr-xr-x. 3 root root 4096 Jun 22 23:47 /var/lib/ambari-agent/data/tmp/
> ```
> 
> 
> Diffs
> -----
> 
>   ambari-agent/pom.xml 0dedc8d 
> 
> Diff: https://reviews.apache.org/r/35751/diff/
> 
> 
> Testing
> -------
> 
> 
> Thanks,
> 
> Robert Levas
> 
>


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message