ambari-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Frank Eisenhauer <feisenhau...@gmail.com>
Subject Re: Ambari 2.0 Kerberos Activation - Failed to create keytab
Date Fri, 17 Apr 2015 20:03:37 GMT
Hi Jeff,

Ambari is running as root.

Am 17.04.2015 um 21:50 schrieb Jeff Sposetti:
> Hi, Are you running your Ambari Server as non-root?
>
> https://issues.apache.org/jira/browse/AMBARI-10266
>
> You might be hitting that BUG.
>
> On 4/17/15, 3:41 PM, "Frank Eisenhauer" <feisenhauer2@gmail.com> wrote:
>
>> Hi All,
>> I'm trying to enable Kerberos in Ambari 2.0.0 after upgrade from Ambari
>> 1.7.
>>
>> During "Test Kerberos Client" I'm getting the error "Failed to create
>> keytab file for ambari-qa_idheyfiu@BIGDATA.XXX - Failed to export keytab
>> file"
>>
>> The ambari-server.log states:
>> 17 Apr 2015 21:41:29,601  INFO [Server Action Executor Worker 4215]
>> CreateKeytabFilesServerAction:170 - Creating keytab file for
>> ambari-qa_idheyfiu@BIGDATA$
>> 17 Apr 2015 21:41:29,636 ERROR [Server Action Executor Worker 4215]
>> KerberosOperationHandler:433 - Failed to export keytab file
>> java.io.FileNotFoundException:
>> /var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6
>> d850833d0d36946b1c5c5b260bec371c5247c
>> (Pe$
>>          at java.io.FileOutputStream.open(Native Method)
>>          at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
>>          at
>> org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab
>> .java:273)
>>          at
>> org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav
>> a:133)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
>> eateKeytabFile(KerberosOperationHandler.java:429)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>> on.processIdentity(CreateKeytabFilesServerAction.java:276)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>> sRecord(KerberosServerAction.java:494)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>> sIdentities(KerberosServerAction.java:386)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>> on.execute(CreateKeytabFilesServerAction.java:99)
>>          at
>> org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(
>> ServerActionExecutor.java:504)
>>          at
>> org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv
>> erActionExecutor.java:441)
>>          at java.lang.Thread.run(Thread.java:744)
>> 17 Apr 2015 21:41:29,637 ERROR [Server Action Executor Worker 4215]
>> CreateKeytabFilesServerAction:290 - Failed to create keytab file for
>> ambari-qa_idheyfiu$
>> org.apache.ambari.server.serveraction.kerberos.KerberosOperationException:
>>
>> Failed to export keytab file
>>          at
>> org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
>> eateKeytabFile(KerberosOperationHandler.java:439)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>> on.processIdentity(CreateKeytabFilesServerAction.java:276)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>> sRecord(KerberosServerAction.java:494)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>> sIdentities(KerberosServerAction.java:386)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>> on.execute(CreateKeytabFilesServerAction.java:99)
>>          at
>> org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(
>> ServerActionExecutor.java:504)
>>          at
>> org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv
>> erActionExecutor.java:441)
>>          at java.lang.Thread.run(Thread.java:744)
>> Caused by: java.io.FileNotFoundException:
>> /var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6
>> d850833d0d36946b1c5c5b260bec37$
>>          at java.io.FileOutputStream.open(Native Method)
>>          at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
>>          at
>> org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab
>> .java:273)
>>          at
>> org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav
>> a:133)
>>          at
>> org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
>> eateKeytabFile(KerberosOperationHandler.java:429)
>>          ... 7 more
>>
>> I've found a Jira Log
>> "https://issues.apache.org/jira/browse/AMBARI-10266" but the mentioned
>> solution does not solve the issue. The permission denied exception still
>> occurs.
>> Ambari Server is running as root.
>>


Mime
View raw message