Return-Path: X-Original-To: apmail-ambari-dev-archive@www.apache.org Delivered-To: apmail-ambari-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id DB08F18F1E for ; Tue, 23 Jun 2015 02:14:00 +0000 (UTC) Received: (qmail 61949 invoked by uid 500); 23 Jun 2015 02:14:00 -0000 Delivered-To: apmail-ambari-dev-archive@ambari.apache.org Received: (qmail 61911 invoked by uid 500); 23 Jun 2015 02:14:00 -0000 Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@ambari.apache.org Delivered-To: mailing list dev@ambari.apache.org Received: (qmail 61899 invoked by uid 99); 23 Jun 2015 02:14:00 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 23 Jun 2015 02:14:00 +0000 Date: Tue, 23 Jun 2015 02:14:00 +0000 (UTC) From: "Hadoop QA (JIRA)" To: dev@ambari.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (AMBARI-12082) Ambari agent temp directory has wrong permissions on ambari-server host MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/AMBARI-12082?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14597007#comment-14597007 ] Hadoop QA commented on AMBARI-12082: ------------------------------------ {color:red}-1 overall{color}. Here are the results of testing the latest attachment http://issues.apache.org/jira/secure/attachment/12741174/AMBARI-12082_01.patch against trunk revision . {color:green}+1 @author{color}. The patch does not contain any @author tags. {color:red}-1 tests included{color}. The patch doesn't appear to include any new or modified tests. Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch. {color:green}+1 javac{color}. The applied patch does not increase the total number of javac compiler warnings. {color:green}+1 release audit{color}. The applied patch does not increase the total number of release audit warnings. {color:green}+1 core tests{color}. The patch passed unit tests in . Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3234//testReport/ Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3234//console This message is automatically generated. > Ambari agent temp directory has wrong permissions on ambari-server host > ----------------------------------------------------------------------- > > Key: AMBARI-12082 > URL: https://issues.apache.org/jira/browse/AMBARI-12082 > Project: Ambari > Issue Type: Bug > Components: ambari-agent > Affects Versions: 2.1.0 > Reporter: Robert Levas > Assignee: Robert Levas > Priority: Critical > Fix For: 2.1.0 > > Attachments: AMBARI-12082_01.patch > > > The Ambari agent temp directory (typically /var/lib/ambari-agent/data/tmp) has the incorrect permissions on the Ambari server host. This is causing web alert errors on SUSE 11.3 for tests that do not run as root when Kerberos is enabled. The issues appears to be masked on other platforms. > The permissions should be 777 but appear to be 655. > {noformat:title=Ambari server host} > $ ls -ld /var/lib/ambari-agent/data/tmp > drwxr-xr-x. 6 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp > {noformat} > {noformat:title=Ambari agent host} > # ls -ld /var/lib/ambari-agent/data/tmp > drwxrwxrwx. 7 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp > {noformat} > An example of the related errror found in the alert message on a SUSE 11.3 cluster > {noformat} > Connection failed to http://HOST:50070 (Execution of '/usr/bin/kinit -l 5m -c /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f -kt /etc/security/keytabs/spnego.service.keytab HTTP/HOST@EXAMPLE.COM > /dev/null' returned 1. kinit(v5): Credentials cache permissions incorrect when initializing cache /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f) > {noformat} > Errors are seen for HDFS and Yarn after Kerberos is enabled on the cluster. > *Steps to reproduce:* > # Install ambari-sever and ambari-agent packages - {{yum -y install ambari-agent ambari-server}} > ** {noformat} > # ls -ld /var/lib/ambari-agent/data/tmp/ > drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/ > {noformat} > # Setup Ambari server - {{ambari-server setup -s}} > ** {noformat} > # ls -ld /var/lib/ambari-agent/data/tmp/ > drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/ > {noformat} > # Start Ambari server - {{ambari-server start}} > ** {noformat} > # ls -ld /var/lib/ambari-agent/data/tmp/ > drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/ > {noformat} > # Create cluster > ** After 'Confirm Hosts' page completes: > ** {noformat} > # ls -ld /var/lib/ambari-agent/data/tmp/ > drwxr-xr-x. 3 root root 4096 Jun 22 23:47 /var/lib/ambari-agent/data/tmp/ > {noformat} -- This message was sent by Atlassian JIRA (v6.3.4#6332)