ambari-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Robert Levas <rle...@hortonworks.com>
Subject Re: Ambari 2.0 Kerberos Activation - Failed to create keytab
Date Fri, 17 Apr 2015 21:14:08 GMT
Hi Frank,

Can you check to see if /var/lib/ambari-server/data/tmp/ exists on the
Ambari server host?  If so, what permissions does it have?

Ideally, /var/lib/ambari-server/data/tmp/ exists and all directories in
the path are executable by the user that Ambari runs as.

Both of these are essentially covered in
https://issues.apache.org/jira/browse/AMBARI-10266 and I saw that you
acknowledged the solution in the ticket, but I just wanted to make sure we
covered all of the bases.

Other than this, I am not sure while the file cannot be written.  Obvious
things like being out of disk space or memory could cause the issue, but
you would be seeing other issues if this was the case.

What OS and Java VM are you running Ambari on?

Rob

On 4/17/15, 4:03 PM, "Frank Eisenhauer" <feisenhauer2@gmail.com> wrote:

>Hi Jeff,
>
>Ambari is running as root.
>
>Am 17.04.2015 um 21:50 schrieb Jeff Sposetti:
>> Hi, Are you running your Ambari Server as non-root?
>>
>> https://issues.apache.org/jira/browse/AMBARI-10266
>>
>> You might be hitting that BUG.
>>
>> On 4/17/15, 3:41 PM, "Frank Eisenhauer" <feisenhauer2@gmail.com> wrote:
>>
>>> Hi All,
>>> I'm trying to enable Kerberos in Ambari 2.0.0 after upgrade from Ambari
>>> 1.7.
>>>
>>> During "Test Kerberos Client" I'm getting the error "Failed to create
>>> keytab file for ambari-qa_idheyfiu@BIGDATA.XXX - Failed to export
>>>keytab
>>> file"
>>>
>>> The ambari-server.log states:
>>> 17 Apr 2015 21:41:29,601  INFO [Server Action Executor Worker 4215]
>>> CreateKeytabFilesServerAction:170 - Creating keytab file for
>>> ambari-qa_idheyfiu@BIGDATA$
>>> 17 Apr 2015 21:41:29,636 ERROR [Server Action Executor Worker 4215]
>>> KerberosOperationHandler:433 - Failed to export keytab file
>>> java.io.FileNotFoundException:
>>> 
>>>/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4
>>>e6
>>> d850833d0d36946b1c5c5b260bec371c5247c
>>> (Pe$
>>>          at java.io.FileOutputStream.open(Native Method)
>>>          at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
>>>          at
>>> 
>>>org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keyt
>>>ab
>>> .java:273)
>>>          at
>>> 
>>>org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.j
>>>av
>>> a:133)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.
>>>cr
>>> eateKeytabFile(KerberosOperationHandler.java:429)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAc
>>>ti
>>> on.processIdentity(CreateKeytabFilesServerAction.java:276)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proc
>>>es
>>> sRecord(KerberosServerAction.java:494)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proc
>>>es
>>> sIdentities(KerberosServerAction.java:386)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAc
>>>ti
>>> on.execute(CreateKeytabFilesServerAction.java:99)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execut
>>>e(
>>> ServerActionExecutor.java:504)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Se
>>>rv
>>> erActionExecutor.java:441)
>>>          at java.lang.Thread.run(Thread.java:744)
>>> 17 Apr 2015 21:41:29,637 ERROR [Server Action Executor Worker 4215]
>>> CreateKeytabFilesServerAction:290 - Failed to create keytab file for
>>> ambari-qa_idheyfiu$
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosOperationExceptio
>>>n:
>>>
>>> Failed to export keytab file
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.
>>>cr
>>> eateKeytabFile(KerberosOperationHandler.java:439)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAc
>>>ti
>>> on.processIdentity(CreateKeytabFilesServerAction.java:276)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proc
>>>es
>>> sRecord(KerberosServerAction.java:494)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosServerAction.proc
>>>es
>>> sIdentities(KerberosServerAction.java:386)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.CreateKeytabFilesServerAc
>>>ti
>>> on.execute(CreateKeytabFilesServerAction.java:99)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.execut
>>>e(
>>> ServerActionExecutor.java:504)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.ServerActionExecutor$Worker.run(Se
>>>rv
>>> erActionExecutor.java:441)
>>>          at java.lang.Thread.run(Thread.java:744)
>>> Caused by: java.io.FileNotFoundException:
>>> 
>>>/var/lib/ambari-server/data/tmp/.ambari_1429299679291-0.d/HADOOP-SRV01/4
>>>e6
>>> d850833d0d36946b1c5c5b260bec37$
>>>          at java.io.FileOutputStream.open(Native Method)
>>>          at java.io.FileOutputStream.<init>(FileOutputStream.java:221)
>>>          at
>>> 
>>>org.apache.directory.server.kerberos.shared.keytab.Keytab.writeFile(Keyt
>>>ab
>>> .java:273)
>>>          at
>>> 
>>>org.apache.directory.server.kerberos.shared.keytab.Keytab.write(Keytab.j
>>>av
>>> a:133)
>>>          at
>>> 
>>>org.apache.ambari.server.serveraction.kerberos.KerberosOperationHandler.
>>>cr
>>> eateKeytabFile(KerberosOperationHandler.java:429)
>>>          ... 7 more
>>>
>>> I've found a Jira Log
>>> "https://issues.apache.org/jira/browse/AMBARI-10266" but the mentioned
>>> solution does not solve the issue. The permission denied exception
>>>still
>>> occurs.
>>> Ambari Server is running as root.
>>>
>


Mime
View raw message