ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Nicola Marangoni (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (AMBARI-20445) two-way ssl on Ubuntu 16.04 not working
Date Tue, 14 Mar 2017 15:38:41 GMT

     [ https://issues.apache.org/jira/browse/AMBARI-20445?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Nicola Marangoni updated AMBARI-20445:
--------------------------------------
    Description: 
In Ubuntu 16.04.2 it is not possible to register the agent when 2-way ssl is enabled.

Scenario:
- Server running under user *ambari-server*
- Agent running under user *ambari-agent*
The same scenarion in CentOS 7 works correctly!

Symptoms:
- During registration, folder */var/lib/ambari-agent/keys* remains empty and registration
fails
- After manually copying *ca.crt* to the folder, *<agent-fqdn>.key* and *<agent-fqdn>.csr*
are created but not *<agent-fqdn>.crt*, registration fails again
- After manually creating *<agent-fqdn>.crt* registration is successfull.

It seems that transfer of the .crt files from server to agent doesn't work in Ubuntu 16.04.
Same scenario works well in CentOS 7.

  was:
In Ubuntu 16.04.2 it is not possible to register the agent when 2-way ssl is enabled.

Scenario:
- Server running under user *ambari-server*
- Agent running under user ambari-agent
The same scenarion in CentOS 7 works correctly!

Symptoms:
- During registration, folder /var/lib/ambari-agent/keys remains empty and registration fails
- After manually copying ca.crt to the folder, <agent-fqdn>.key and <agent-fqdn>.csr
are created but not <agent-fqdn>.crt, registration fails again
- After manually creating <agent-fqdn>.crt registration is successfull.

It seems that transfer of the .crt files from server to agent doesn't work in Ubuntu 16.04.
Same scenario works well in CentOS 7.


> two-way ssl on Ubuntu 16.04 not working
> ---------------------------------------
>
>                 Key: AMBARI-20445
>                 URL: https://issues.apache.org/jira/browse/AMBARI-20445
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-agent, ambari-server
>    Affects Versions: trnk
>         Environment: Ubuntu 16.04.2
>            Reporter: Nicola Marangoni
>              Labels: 2-way-ssl, ssl
>
> In Ubuntu 16.04.2 it is not possible to register the agent when 2-way ssl is enabled.
> Scenario:
> - Server running under user *ambari-server*
> - Agent running under user *ambari-agent*
> The same scenarion in CentOS 7 works correctly!
> Symptoms:
> - During registration, folder */var/lib/ambari-agent/keys* remains empty and registration
fails
> - After manually copying *ca.crt* to the folder, *<agent-fqdn>.key* and *<agent-fqdn>.csr*
are created but not *<agent-fqdn>.crt*, registration fails again
> - After manually creating *<agent-fqdn>.crt* registration is successfull.
> It seems that transfer of the .crt files from server to agent doesn't work in Ubuntu
16.04. Same scenario works well in CentOS 7.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message