incubator-ambari-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom Beerbower (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (AMBARI-2859) Error encountered running ambari-server encrypt-passwords / setup-ganglia-https / setup-nagios-https
Date Fri, 09 Aug 2013 20:54:47 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-2859?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13735289#comment-13735289
] 

Tom Beerbower commented on AMBARI-2859:
---------------------------------------

Tested ...

with password encryption off …

{code}
ambari-server setup-ganglia-https
Using python  /usr/bin/python2.6
Setting up HTTPS properties for Ganglia...
Do you want to configure HTTPS for Ganglia [y/n] (y)? 
TrustStore type [jks/jceks/pkcs12] (jks):
Path to TrustStore file :/root/ts.ks
Password for TrustStore:
Re-enter password: 
Enter path to Ganglia Certificate: /vagrant/test.crt
Ambari Server 'setup-ganglia-https' completed successfully.
{code}

/etc/ambari-server/conf/ambari.properties … truststore is setup and password is not encrypted

{code}
#Changed by 'ambari-server setup-ganglia-https' command
#Fri Aug 09 20:30:49 GMT 2013
ssl.trustStore.type=jks
server.connection.max.idle.millis=900000
bootstrap.script=/usr/lib/python2.6/site-packages/ambari_server/bootstrap.py
server.version.file=/var/lib/ambari-server/resources/version
api.authenticate=true
jce_policy.url=http://public-repo-1.hortonworks.com/ARTIFACTS/jce_policy-6.zip
server.persistence.type=local
ambari-server.user=root
server.jdbc.user.name=ambari
java.home=/usr/jdk64/jdk1.6.0_31
ganglia.https=true
server.os_type=redhat5
resources.dir=/var/lib/ambari-server/resources
ssl.trustStore.path=/root/ts.ks
bootstrap.setup_agent.script=/usr/lib/python2.6/site-packages/ambari_server/setupAgent.py
jdk.url=http://public-repo-1.hortonworks.com/ARTIFACTS/jdk-6u31-linux-x64.bin
security.server.keys_dir=/var/lib/ambari-server/keys
webapp.dir=/usr/lib/ambari-server/web
metadata.path=/var/lib/ambari-server/resources/stacks
server.fqdn.service.url=http://169.254.169.254/latest/meta-data/public-hostname
bootstrap.dir=/var/run/ambari-server/bootstrap
server.jdbc.user.passwd=${alias=ambari.db.password}
ssl.trustStore.password=BigData
{code}

with password encrypted …

{code}
ambari-server encrypt-passwords
Using python  /usr/bin/python2.6
Setting up password encryption...
Please provide master key for locking the credential store: 
Re-enter master key: 
Do you want to persist master key. If you choose not to persist, you need to provide the Master
Key while starting the ambari server as an env variable named AMBARI_SECURITY_MASTER_KEY or
the start will prompt for the master key. Persist [y/n] (y)? y
Adjusting ambari-server permissions and ownership...
Ambari Server 'encrypt-passwords' completed successfully.
{code}

{code}
ambari-server setup-ganglia-https
Using python  /usr/bin/python2.6
Setting up HTTPS properties for Ganglia...
Do you want to configure HTTPS for Ganglia [y/n] (y)? 
TrustStore type [jks/jceks/pkcs12] (jks):
Path to TrustStore file :/root/ts.ks
Password for TrustStore:
Re-enter password: 
Enter path to Ganglia Certificate: /vagrant/test.crt
Ambari Server 'setup-ganglia-https' completed successfully.
{code}

/etc/ambari-server/conf/ambari.properties … truststore is setup and password is encrypted

{code}
#Changed by 'ambari-server setup-ganglia-https' command
#Fri Aug 09 20:34:26 GMT 2013
ssl.trustStore.type=jks
server.connection.max.idle.millis=900000
bootstrap.script=/usr/lib/python2.6/site-packages/ambari_server/bootstrap.py
server.version.file=/var/lib/ambari-server/resources/version
api.authenticate=true
jce_policy.url=http://public-repo-1.hortonworks.com/ARTIFACTS/jce_policy-6.zip
server.persistence.type=local
ambari-server.user=root
server.jdbc.user.name=ambari
java.home=/usr/jdk64/jdk1.6.0_31
ganglia.https=true
security.passwords.encryption.enabled=true
server.os_type=redhat5
resources.dir=/var/lib/ambari-server/resources
ssl.trustStore.path=/root/ts.ks
bootstrap.setup_agent.script=/usr/lib/python2.6/site-packages/ambari_server/setupAgent.py
jdk.url=http://public-repo-1.hortonworks.com/ARTIFACTS/jdk-6u31-linux-x64.bin
security.server.keys_dir=/var/lib/ambari-server/keys
webapp.dir=/usr/lib/ambari-server/web
metadata.path=/var/lib/ambari-server/resources/stacks
server.fqdn.service.url=http://169.254.169.254/latest/meta-data/public-hostname
bootstrap.dir=/var/run/ambari-server/bootstrap
server.jdbc.user.passwd=${alias=ambari.db.password}
ssl.trustStore.password=${alias=ambari.ssl.trustStore.password}
{code}


also works for Nagios …

{code}
ambari-server setup-nagios-https
Using python  /usr/bin/python2.6
Setting up HTTPS properties for Nagios...
Do you want to configure HTTPS for Nagios [y/n] (y)? y
Enter path to Nagios Certificate: /vagrant/test.crt
Ambari Server 'setup-nagios-https' completed successfully.
{code}




                
> Error encountered running ambari-server encrypt-passwords / setup-ganglia-https / setup-nagios-https
> ----------------------------------------------------------------------------------------------------
>
>                 Key: AMBARI-2859
>                 URL: https://issues.apache.org/jira/browse/AMBARI-2859
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Tom Beerbower
>            Assignee: Tom Beerbower
>             Fix For: 1.2.5
>
>         Attachments: AMBARI-2859.patch
>
>
> root@ip-10-236-130-247 ~# ambari-server setup
> Using python /usr/bin/python2.6
> Initializing...
> Setup ambari-server
> Checking SELinux...
> SELinux status is 'enabled'
> SELinux mode is 'permissive'
> WARNING: SELinux is set to 'permissive' mode and temporarily disabled.
> OK to continue y/n ?
> Ambari-server daemon is configured to run under user 'root'. Change this setting y/n
?
> Adjusting ambari-server permissions and ownership...
> Checking iptables...
> iptables is disabled now. please reenable later.
> Checking JDK...
> JCE Policy archive already exists, using /var/lib/ambari-server/resources/jce_policy-6.zip
> Completing setup...
> Configuring database...
> Enter advanced database configuration y/n ?
> Default properties detected. Using built-in database.
> Enter current Master Key:
> Checking PostgreSQL...
> Running initdb: This may take upto a minute.
> About to start PostgreSQL
> Configuring local database...
> Traceback (most recent call last):
> File "/usr/sbin/ambari-server.py", line 3722, in <module>
> main()
> File "/usr/sbin/ambari-server.py", line 3540, in main
> setup(options)
> File "/usr/sbin/ambari-server.py", line 1953, in setup
> retcode = setup_db(args)
> File "/usr/sbin/ambari-server.py", line 862, in setup_db
> configure_database_username_password(args)
> File "/usr/sbin/ambari-server.py", line 1314, in configure_database_username_password
> args.database_password = decrypt_password_for_alias(JDBC_RCA_PASSWORD_ALIAS)
> File "/usr/sbin/ambari-server.py", line 2615, in decrypt_password_for_alias
> return get_encrypted_password(alias, password, properties)
> NameError: global name 'password' is not defined

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message