ambari-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeff Sposetti <j...@hortonworks.com>
Subject Re: Ambari 2.0 Kerberos Activation - Failed to create keytab
Date Fri, 17 Apr 2015 19:50:27 GMT
Hi, Are you running your Ambari Server as non-root?

https://issues.apache.org/jira/browse/AMBARI-10266

You might be hitting that BUG.

On 4/17/15, 3:41 PM, "Frank Eisenhauer" <feisenhauer2@gmail.com> wrote:

>Hi All,
>I'm trying to enable Kerberos in Ambari 2.0.0 after upgrade from Ambari
>1.7.
>
>During "Test Kerberos Client" I'm getting the error "Failed to create
>keytab file for ambari-qa_idheyfiu@BIGDATA.XXX - Failed to export keytab
>file"
>
>The ambari-server.log states:
>17 Apr 2015 21:41:29,601  INFO [Server Action Executor Worker 4215]
>CreateKeytabFilesServerAction:170 - Creating keytab file for
>ambari-qa_idheyfiu@BIGDATA$
>17 Apr 2015 21:41:29,636 ERROR [Server Action Executor Worker 4215]
>KerberosOperationHandler:433 - Failed to export keytab file
>java.io.FileNotFoundException:
>/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6
>d850833d0d36946b1c5c5b260bec371c5247c
>(Pe$
>         at java.io.FileOutputStream.open(Native Method)
>         at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
>         at 
>org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab
>.java:273)
>         at 
>org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav
>a:133)
>         at 
>org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
>eateKeytabFile(KerberosOperationHandler.java:429)
>         at 
>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>on.processIdentity(CreateKeytabFilesServerAction.java:276)
>         at 
>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>sRecord(KerberosServerAction.java:494)
>         at 
>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>sIdentities(KerberosServerAction.java:386)
>         at 
>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>on.execute(CreateKeytabFilesServerAction.java:99)
>         at 
>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(
>ServerActionExecutor.java:504)
>         at 
>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv
>erActionExecutor.java:441)
>         at java.lang.Thread.run(Thread.java:744)
>17 Apr 2015 21:41:29,637 ERROR [Server Action Executor Worker 4215]
>CreateKeytabFilesServerAction:290 - Failed to create keytab file for
>ambari-qa_idheyfiu$
>org.apache.ambari.server.serveraction.kerberos.KerberosOperationException:
> 
>Failed to export keytab file
>         at 
>org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
>eateKeytabFile(KerberosOperationHandler.java:439)
>         at 
>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>on.processIdentity(CreateKeytabFilesServerAction.java:276)
>         at 
>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>sRecord(KerberosServerAction.java:494)
>         at 
>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proces
>sIdentities(KerberosServerAction.java:386)
>         at 
>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerActi
>on.execute(CreateKeytabFilesServerAction.java:99)
>         at 
>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execute(
>ServerActionExecutor.java:504)
>         at 
>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Serv
>erActionExecutor.java:441)
>         at java.lang.Thread.run(Thread.java:744)
>Caused by: java.io.FileNotFoundException:
>/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4e6
>d850833d0d36946b1c5c5b260bec37$
>         at java.io.FileOutputStream.open(Native Method)
>         at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
>         at 
>org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keytab
>.java:273)
>         at 
>org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.jav
>a:133)
>         at 
>org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.cr
>eateKeytabFile(KerberosOperationHandler.java:429)
>         ... 7 more
>
>I've found a Jira Log
>"https://issues.apache.org/jira/browse/AMBARI-10266" but the mentioned
>solution does not solve the issue. The permission denied exception still
>occurs.
>Ambari Server is running as root.
>


Mime
View raw message