ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hadoop QA (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-12245) HCat Service Check warns keytab contains no suitable keys when Kerberos is enabled
Date Thu, 02 Jul 2015 07:17:05 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-12245?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14611585#comment-14611585
] 

Hadoop QA commented on AMBARI-12245:
------------------------------------

{color:green}+1 overall{color}.  Here are the results of testing the latest attachment 
  http://issues.apache.org/jira/secure/attachment/12743161/AMBARI-12245_01.patch
  against trunk revision .

    {color:green}+1 @author{color}.  The patch does not contain any @author tags.

    {color:green}+1 tests included{color}.  The patch appears to include 1 new or modified
test files.

    {color:green}+1 javac{color}.  The applied patch does not increase the total number of
javac compiler warnings.

    {color:green}+1 release audit{color}.  The applied patch does not increase the total number
of release audit warnings.

    {color:green}+1 core tests{color}.  The patch passed unit tests in ambari-server.

Test results: https://builds.apache.org/job/Ambari-trunk-test-patch/3333//testReport/
Console output: https://builds.apache.org/job/Ambari-trunk-test-patch/3333//console

This message is automatically generated.

> HCat Service Check warns keytab contains no suitable keys when Kerberos is enabled
> ----------------------------------------------------------------------------------
>
>                 Key: AMBARI-12245
>                 URL: https://issues.apache.org/jira/browse/AMBARI-12245
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-server
>    Affects Versions: 2.1.0
>         Environment: ambari-server --hash: 82c5c6a183041dcbdbc46f3029937ccde8869fba
> HDP: HDP 2.3
> OS: CentOS 6.5
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>              Labels: hive, kerberos
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-12245_01.patch
>
>
> HCat Service Check (part of the Hive Service Check) fails in cluster where Kerberos is
enabled:
> {noformat}
> Test connectivity to hive server
> Waiting for the Hive server to start...
> 2015-07-01 18:39:17,173 - Execute['/usr/bin/kinit -kt /etc/security/keytabs/smokeuser.headless.keytab
ambari-qa-tezview@EXAMPLE.COM; '] {'user': 'ambari-qa'}
> 2015-07-01 18:39:17,321 - Execute['! beeline -u 'jdbc:hive2://c6502.ambari.apache.org:10000/;transportMode=binary;principal=hive/_HOST@EXAMPLE.COM'
-e '' 2>&1| awk '{print}'|grep -i -e 'Connection refused' -e 'Invalid URL''] {'path':
['/bin/', '/usr/bin/', '/usr/lib/hive/bin/', '/usr/sbin/'], 'user': 'ambari-qa', 'timeout':
30}
> Successfully connected to c6502.ambari.apache.org on port 10000
> Successfully connected to Hive at c6502.ambari.apache.org on port 10000 after 6 seconds
> 2015-07-01 18:39:23,313 - File['/var/lib/ambari-agent/data/tmp/hcatSmoke.sh'] {'content':
StaticFile('hcatSmoke.sh'), 'mode': 0755}
> 2015-07-01 18:39:23,314 - Execute['/usr/bin/kinit -kt /etc/security/keytabs/smokeuser.headless.keytab
ambari-qa; env JAVA_HOME=/usr/jdk64/jdk1.8.0_40 /var/lib/ambari-agent/data/tmp/hcatSmoke.sh
hcatsmokeida8c06641_date390115 prepare'] {'logoutput': True, 'path': ['/usr/sbin', '/usr/local/bin',
'/bin', '/usr/bin', '/usr/sbin:/sbin:/usr/lib/ambari-server/*:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin:/var/lib/ambari-agent:/usr/hdp/current/hive-client/bin:/usr/hdp/current/hadoop-client/bin'],
'tries': 3, 'user': 'ambari-qa', 'try_sleep': 5}
> kinit: Keytab contains no suitable keys for ambari-qa@EXAMPLE.COM while getting initial
credentials
> WARNING: Use "yarn jar" to launch YARN applications.
> {noformat}
> The issue appears to be the wrong principal name in the {{kinit}} command - note the
missing cluster name and realm in the principal name value.
> {noformat}
> /usr/bin/kinit -kt /etc/security/keytabs/smokeuser.headless.keytab ambari-qa
> {noformat}
> *Cause*
> The error is caused by the use of the wrong variable when generating the kinit command
at common-services/HIVE/0.12.0.2.0/package/scripts/hcat_service_check.py:44
> {noformat}
>         {kinit_path_local} -kt {smoke_user_keytab} {smokeuser}
> {noformat}
> *Solution*
> At common-services/HIVE/0.12.0.2.0/package/scripts/hcat_service_check.py:44, change {{smokeuser}}
to {{smokeuser_principal}}.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message