ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Onischuk" <aonis...@hortonworks.com>
Subject Review Request 39049: Oozie Alert Fails In Kerberized Environment That Is Not SSL
Date Tue, 06 Oct 2015 11:05:55 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/39049/
-----------------------------------------------------------

Review request for Ambari and Dmitro Lisnichenko.


Bugs: AMBARI-13321
    https://issues.apache.org/jira/browse/AMBARI-13321


Repository: ambari


Description
-------

The Oozie alert check for the server status (`alert_check_oozie_server.py`) is
not correctly performing a kinit before each check. There are two overall
problems:

  * The smokeuser is being used instead of the oozie user
  * The principal is using 0.0.0.0 instead of the FQDN of the host.
    
    
    
    [root@c6401:~]$ kinit -k -t /etc/security/keytabs/spnego.service.keytab HTTP/c6401.ambari.apache.org
    [root@c6401:~]$ oozie admin --oozie http://0.0.0.0:11000/oozie -status 
    Error: IO_ERROR : java.io.IOException: Error while connecting Oozie server. No of retries
= 1. Exception = Could not authenticate, org.apache.hadoop.security.authentication.client.AuthenticationException:
Invalid SPNEGO sequence, status code: 400 
    [root@c6401:~]$ oozie admin --oozie http://c6401.ambari.apache.org:11000/oozie -status

    System mode: NORMAL


Diffs
-----

  ambari-server/src/main/resources/common-services/OOZIE/4.0.0.2.0/package/alerts/alert_check_oozie_server.py
c3143c6 

Diff: https://reviews.apache.org/r/39049/diff/


Testing
-------

mvn clean test


Thanks,

Andrew Onischuk


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message