Return-Path: X-Original-To: apmail-incubator-ambari-user-archive@minotaur.apache.org Delivered-To: apmail-incubator-ambari-user-archive@minotaur.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id B56BA10457 for ; Tue, 23 Jul 2013 20:37:48 +0000 (UTC) Received: (qmail 97826 invoked by uid 500); 23 Jul 2013 20:37:48 -0000 Delivered-To: apmail-incubator-ambari-user-archive@incubator.apache.org Received: (qmail 97781 invoked by uid 500); 23 Jul 2013 20:37:48 -0000 Mailing-List: contact ambari-user-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: ambari-user@incubator.apache.org Delivered-To: mailing list ambari-user@incubator.apache.org Received: (qmail 97773 invoked by uid 99); 23 Jul 2013 20:37:48 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 23 Jul 2013 20:37:48 +0000 X-ASF-Spam-Status: No, hits=2.2 required=5.0 tests=HTML_MESSAGE,MIME_QP_LONG_LINE,SPF_HELO_PASS,SPF_PASS,WEIRD_PORT X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of acody@keywcorp.com designates 63.138.81.70 as permitted sender) Received: from [63.138.81.70] (HELO mail.keywcorp.com) (63.138.81.70) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 23 Jul 2013 20:37:44 +0000 From: Aaron Cody To: "ambari-user@incubator.apache.org" Subject: Re: problem with the registration step Thread-Topic: problem with the registration step Thread-Index: AQHOh9qwAv4HUTvvUEC0Okoxr+tDYJly8d0A//+RzACAAAMyAA== Date: Tue, 23 Jul 2013 20:39:32 +0000 Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.3.6.130613 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha256; boundary="B_3457431440_18116807" MIME-Version: 1.0 X-Virus-Checked: Checked by ClamAV on apache.org --B_3457431440_18116807 Content-type: multipart/alternative; boundary="B_3457431440_18121284" --B_3457431440_18121284 Content-type: text/plain; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable looks like the agent is failing to connect back to the master because of some SSL cert problem?? curl=20 https://ac-dev-01.sensage.com:8441/agent/v1/register/ac-dev-03.sensage.com curl: (60) Peer certificate cannot be authenticated with known CA certificates More details here: http://curl.haxx.se/docs/sslcerts.html curl performs SSL certificate verification by default, using a "bundle" of Certificate Authority (CA) public keys (CA certs). If the default bundle file isn't adequate, you can specify an alternate file using the --cacert option. If this HTTPS server uses a certificate signed by a CA represented in the bundle, the certificate verification probably failed due to a problem with the certificate (it might be expired, or the name might not match the domain name in the URL). If you'd like to turn off curl's verification of the certificate, use the -k (or --insecure) option. any ideas how to rectify this? thanks From: Aaron Cody Reply-To: Date: Tuesday, July 23, 2013 1:28 PM To: "ambari-user@incubator.apache.org" Subject: Re: problem with the registration step attached - thanks From: Siddharth Wagle Reply-To: "ambari-user@incubator.apache.org" Date: Tuesday, July 23, 2013 1:00 PM To: "ambari-user@incubator.apache.org" Subject: Re: problem with the registration step Hi Aaron, Could you correlate this message with the server logs and provide them? If you stop and start the agent you should be able to capture the error if any on the server side. To turn on debugging on the agent, edit /etc/ambari-agent/conf/ambari-agent.ini also turning on debugging on the server site might help. (/etc/ambari-server/conf/log4j.properties) -Sid On Tue, Jul 23, 2013 at 12:27 PM, Aaron Cody wrote: > Any ideas what might be causing this? >=20 > * I am using FQDNs and I can passwordless-SSH from master to all slave > machines=8A > * RedHat 6.4 > Registration fails: >=20 > self.httpsconn.connect()\n File > \"/usr/lib/python2.6/site-packages/ambari_agent/security.py\", line 63, i= n > connect\n ca_certs=3Dserver_crt)\n File \"/usr/lib64/python2.6/ssl.py\", li= ne > 338, in wrap_socket\n suppress_ragged_eofs=3Dsuppress_ragged_eofs)\n File > \"/usr/lib64/python2.6/ssl.py\", line 118, in __init__\n cert_reqs, > ssl_version, ca_certs)\nSSLError: [Errno 336445442] _ssl.c:353: > error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib= \n', > None)\n\nSTDERR\nConnection to ac-dev-04.sensage.com > closed.\nRegistering with the > server...\nRegistration with the server failed."}] --B_3457431440_18121284 Content-type: text/html; charset="ISO-8859-1" Content-transfer-encoding: quoted-printable
looks like the agent is fail= ing to connect back to the master because of some SSL cert problem??  <= /div>


curl= : (60) Peer certificate cannot be authenticated with known CA certificates
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using= a "bundle"
 of Certificate Authority (CA) public keys (CA ce= rts). If the default
 bundle file isn't adequate, you can spe= cify an alternate file
 using the --cacert option.
= If this HTTPS server uses a certificate signed by a CA represented in
<= div> the bundle, the certificate verification probably failed due to a<= /div>
 problem with the certificate (it might be expired, or the na= me might
 not match the domain name in the URL).
If= you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.

any id= eas how to rectify this? 
thanks

From: Aaron Cody <acody@keywcorp.com>
Reply-To: <ambari-user@incubator.apache.org>
Date: Tuesday, July 23, 2013 1:28 PM
To: "ambari= -user@incubator.apache.org" <ambari-user@incubator.apache.org>
Subject: Re: problem with the registration step

attached - thanks
From: Siddharth Wagle <swagle@hortonworks.com>
Reply-To: "ambari-user@incubator.apache.org" <ambari-user@incubator.apache.org>
<= span style=3D"font-weight:bold">Date: Tuesday, July 23, 2013 1:00 PMTo: "ambari-user@incubator.apache.org" <ambari-user@incubator.apache.org>=
Subject: Re: problem with the reg= istration step

<= div>Hi Aaron,

Could you correlate this message with the server logs and provide them?
=
If you stop and start the agent you should be able to capture the error if = any on the server side.

To turn on debugging on the agent, edit /etc/ambari-agent/conf/ambari-agent= .ini
also turning on debugging on the server site might help. (/etc/ambari-serve= r/conf/log4j.properties)

-Sid


On Tue, Jul 23, 2013 at 12:27 P= M, Aaron Cody <acody@keywcorp.com<= /a>> wrote:
Any ideas what might be causing this?
<= div>
  • I am using FQDNs and I can passw= ordless-SSH from master to all slave machines…
  • <= font color=3D"#303942" face=3D"Menlo,monospace">RedHat 6.4
Registration fails:

=

--B_3457431440_18121284-- --B_3457431440_18116807 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIIT9QYJKoZIhvcNAQcCoIIT5jCCE+ICAQExDzANBglghkgBZQMEAgEFADALBgkqhkiG9w0B BwGgghFnMIIG/zCCBeegAwIBAgIQDOu1eNENT1OQBemqK7qxZDANBgkqhkiG9w0BAQUFADCB pjELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8wHQYDVQQL ExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0 ZWQxNzA1BgNVBAMTLlN5bWFudGVjIENsYXNzIDEgSW5kaXZpZHVhbCBTdWJzY3JpYmVyIENB IC0gRzQwHhcNMTMwNTA5MDAwMDAwWhcNMTQwNTEwMjM1OTU5WjCBxDEuMCwGA1UEAwwlUGVy c29uYSBOb3QgVmFsaWRhdGVkIC0gMTM2ODEyMDQ3ODY4NjEhMB8GCSqGSIb3DQEJARYSYWNv ZHlAa2V5d2NvcnAuY29tMQ8wDQYDVQQLDAZTL01JTUUxHjAcBgNVBAsMFVBlcnNvbmEgTm90 IFZhbGlkYXRlZDEfMB0GA1UECwwWU3ltYW50ZWMgVHJ1c3QgTmV0d29yazEdMBsGA1UECgwU U3ltYW50ZWMgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf Q8tFquGsiSJTJFBepBm28MlnkC3koL0wPMaeNHO+frxlTZafZI72vowClitXKcQakkNQ/Gd8 rhESN133A1PzW4rQtluxJ7Xfxy2tnWFK3Kh/YR9/JAF/mp4nEOF/UsF5T43mOzx2ZatsQOx0 1ET2yfQx+ZMJu/V1FYYxqtiYxHMNr/oRFbeN1N1oOfgXv2gIZUzfDwN/9mwyoFLs7WnxJuRa rO7+lR9K8XNOfqnON61GFjt3aNO1vd3Gbzk1OraG2h20RXC5yIPpZ6s1U3odpl8OsIqRLMT5 IrjBE68ll8q6sHVL4XFCiih7/T9uoPTvuZkY6cQePov9XdLGs0yXAgMBAAGjggMHMIIDAzAM BgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIFoDAgBgNVHSUBAf8EFjAUBggrBgEFBQcDBAYI KwYBBQUHAwIwHQYDVR0OBBYEFPHw4To9fGqGhz/dmP0DaEqKlCogMB0GA1UdEQQWMBSBEmFj b2R5QGtleXdjb3JwLmNvbTAfBgNVHSMEGDAWgBSt+cOTci21uShh5KTXYNXECl4aATCCASsG CCsGAQUFBwEBBIIBHTCCARkwggEVBggrBgEFBQcwAoaCAQdsZGFwOi8vZGlyZWN0b3J5LnZl cmlzaWduLmNvbS9DTiUyMCUzRCUyMFN5bWFudGVjJTIwQ2xhc3MlMjAxJTIwSW5kaXZpZHVh bCUyMFN1YnNjcmliZXIlMjBDQSUyMC0lMjBHNCUyQyUyME9VJTIwJTNEJTIwUGVyc29uYSUy ME5vdCUyMFZhbGlkYXRlZCUyQyUyME9VJTIwJTNEJTIwU3ltYW50ZWMlMjBUcnVzdCUyME5l dHdvcmslMkMlMjBPJTIwJTNEJTIwU3ltYW50ZWMlMjBDb3Jwb3JhdGlvbiUyQyUyMEMlMjAl M0QlMjBVUz9jQUNlcnRpZmljYXRlO2JpbmFyeTBdBgNVHR8EVjBUMFKgUKBOhkxodHRwOi8v cGtpLWNybC5zeW1hdXRoLmNvbS9jYV81NjFjMTAzNjkwYzk3YTY5MjQ3YTBlZjA3MWFjODFh Zi9MYXRlc3RDUkwuY3JsMGwGA1UdIARlMGMwYQYLYIZIAYb4RQEHFwEwUjAmBggrBgEFBQcC ARYaaHR0cDovL3d3dy5zeW1hdXRoLmNvbS9jcHMwKAYIKwYBBQUHAgIwHBoaaHR0cDovL3d3 dy5zeW1hdXRoLmNvbS9ycGEwKwYKYIZIAYb4RQEQAwQdMBsGEmCGSAGG+EUBEAECAgQBhsfO bxYFMTA5MjIwOQYKYIZIAYb4RQEQBQQrMCkCAQAWJGFIUjBjSE02THk5d2Eya3RjbUV1YzNs dFlYVjBhQzVqYjIwPTANBgkqhkiG9w0BAQUFAAOCAQEAA7kTZlUvUj2ZS3t74cJEIQfUtvo8 UwQ4EZ4VaOaFJB3dV0t7PSwB2CUj03RARExKGA4Mx2YmybaKr8gjbp8M7i3zVDQEQ603Ga83 DxxCy3cvFsQFf4obkcXTXoRpkXwVpIDjxmhnftTP8sbal4x6+Hr1qNaXlhtxUoIoSMFjp8Gu SSTSlncIjEappsxTJ9NalYrqESWUYRt1f7yviQStxXTcIAn/1B2JSLoHJ7wso3W3QsrBxADp +1fSw19web+9nWgb83wGAttfdrobgWpfNTu3gn+jiC/ihPCUHqhbj23IJeTEh+FMYY6lTQjS AGbWoVWZL9RlUldLMlY96Q/dlTCCBkIwggUqoAMCAQICEDirAC//rpa3Vv85Wvtd5xswDQYJ KoZIhvcNAQEFBQAwgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEf MB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVy aVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNp Z24gQ2xhc3MgMSBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEcz MB4XDTExMDkwMTAwMDAwMFoXDTIxMDgzMTIzNTk1OVowgaYxCzAJBgNVBAYTAlVTMR0wGwYD VQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3ltYW50ZWMgVHJ1c3QgTmV0 d29yazEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcwNQYDVQQDEy5TeW1hbnRl YyBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEc0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxuwn/R1j9DsdisHTHMjIgoa2uEqGkqqBXHLKMA0vnkEiVzAh JZCao/SsKsaIF4ZhchN2LuwDyyebjyCAN+DkitpVplAP/LlcI2mJQqG6H6/vDvmkyQrx+Dey xtmSSq5937hEH5u6P4wG/tgjT0hRI2pghKjuJy9g35byGiqMPI8AzE/L+iCOvDX24fCatgXz /B0/xhR7DtryBeTTgwKmxWlwtKnkVunbHVz0pjbia7UeKi3cvrvuOgSwMAitX2hsxr0GloiE 5+apZC28ODC7iCbDZ2ZmtLR3+cChxw5y72bi5bnK4POFdzWY3tQcsP5mceI4y258T0BV65fZ qBge7QIDAQABo4ICRDCCAkAwOAYIKwYBBQUHAQEELDAqMCgGCCsGAQUFBzABhhxodHRwOi8v cGtpLW9jc3AudmVyaXNpZ24uY29tMBIGA1UdEwEB/wQIMAYBAf8CAQAwbAYDVR0gBGUwYzBh BgtghkgBhvhFAQcXATBSMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LnN5bWF1dGguY29tL2Nw czAoBggrBgEFBQcCAjAcGhpodHRwOi8vd3d3LnN5bWF1dGguY29tL3JwYTA0BgNVHR8ELTAr MCmgJ6AlhiNodHRwOi8vY3JsLnZlcmlzaWduLmNvbS9wY2ExLWczLmNybDAOBgNVHQ8BAf8E BAMCAQYwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVZlcmlTaWduTVBLSS0yLTk3MB0GA1Ud DgQWBBSt+cOTci21uShh5KTXYNXECl4aATCB8QYDVR0jBIHpMIHmoYHQpIHNMIHKMQswCQYD VQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xHzAdBgNVBAsTFlZlcmlTaWduIFRy dXN0IE5ldHdvcmsxOjA4BgNVBAsTMShjKSAxOTk5IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1 dGhvcml6ZWQgdXNlIG9ubHkxRTBDBgNVBAMTPFZlcmlTaWduIENsYXNzIDEgUHVibGljIFBy aW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHM4IRAItbdVaEVIULAM+vOEjOsaQw DQYJKoZIhvcNAQEFBQADggEBANaPwdqbiPKzbE0fWC+6AVFddMFG6MO4e5/WQPHv/zK6iWvA DjRDn6SZ5qTwXUgzYoWFYf4jiCKMYJsrnGVJlMSiOCRIpVylUEto6WIip5PomSJuPVu7EEIO H0x1RzRWCY/4vYw881y70pZwVHBiTe/REL6dSCxe7IZrB4LwPeElJygs4BZ2HrP95WKW0oo9 Xyuu+1zCE7dlY8s0dkOf1oeZq26tlcEAP0Yngf813iMOQ9wUXzL5yinvwlIw9ZnduYH4OiUg jYJo8rkhhXRmBOGGORYy8i3WKqjJ3tkAAk/jGCDFpYFWtpXe04Kt+HslvmR8LqC6cCz4+XXi dE0HbYQwggQaMIIDAgIRAItbdVaEVIULAM+vOEjOsaQwDQYJKoZIhvcNAQEFBQAwgcoxCzAJ BgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjEfMB0GA1UECxMWVmVyaVNpZ24g VHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkgVmVyaVNpZ24sIEluYy4gLSBGb3Ig YXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVyaVNpZ24gQ2xhc3MgMSBQdWJsaWMg UHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEczMB4XDTk5MTAwMTAwMDAwMFoX DTM2MDcxNjIzNTk1OVowgcoxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5j LjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE6MDgGA1UECxMxKGMpIDE5OTkg VmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTFFMEMGA1UEAxM8VmVy aVNpZ24gQ2xhc3MgMSBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YTUubT5p9jzBHic3j3cbBMW 2XrdJFFmwMcmWQ2sBgjClNEzH/CDNR9uG8jeqm4VTlQn78RtGuwL4w7wRKVXx0BYHqNHH3Hs YPZtlMgYOe3+QhhW3+RMSRB4TgF2NWMSNt1mvAEENqNVaNWiNgmsqyEmVAatP8oU4KzKrQYd leL4nfHgYP/Cf3UrTMza/oeZIeq6/j5U19JZeNs8bs+gEwAauCeh5L5nlsqgxbOc3cl1nusw ml+jzdmueBk/I+lc2ym9rVXIG1SMY/bopurHNxJcoykeAtnbHzu01w9WR4EVBEqvgyfRxViI wd32qqejGNpoqm0RUeG/ZWuflnbRPQIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQCrZo3Xs7rH mrbmVdAF8Z8xjVqq2apGJg9x7aWtU1ZiAUcqROn+P3QLE5u59E0bstFfsrbSiFyzn83L1KfZ YJWEOvjBNx1hyuewxeWR2lSmrDGBrpfezQisuMCXgH9ucqTnaROVZR/Ekzz9eY8E1D5P6vee zs1nfE9lAv+RhVRzx/8294Yt7NBeT/8Rn3IG1rga8UwNJmXiRIAex5/j3egK2uylIIBpaKFP fuFrzwdB+oOOvDjdsC4RsWuyQsyavPlIInlKGQ+yHD4gdNlqw77yKHgTVnlPbVDqG7C1V7E3 Zlgj89wP3wqHxO+GBdU4FGCZo0veBpZxLPLbth+k7z/uMYICUjCCAk4CAQEwgbswgaYxCzAJ BgNVBAYTAlVTMR0wGwYDVQQKExRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWU3lt YW50ZWMgVHJ1c3QgTmV0d29yazEeMBwGA1UECxMVUGVyc29uYSBOb3QgVmFsaWRhdGVkMTcw NQYDVQQDEy5TeW1hbnRlYyBDbGFzcyAxIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQSAtIEc0 AhAM67V40Q1PU5AF6aorurFkMA0GCWCGSAFlAwQCAQUAoGkwLwYJKoZIhvcNAQkEMSIEIBFV Kl4An1CvAzwFVF1yl0QehorhC/mo5s66CafLkynnMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0B BwEwHAYJKoZIhvcNAQkFMQ8XDTEzMDcyMzIwMzcyMFowDQYJKoZIhvcNAQEBBQAEggEAkcoN KCVF146ihxLLO2xULUCyZlh3Q/oFR4ClndMeF2B1x+A1GYR7Am/q1X1hoKwBuMRgNAmdbnxn mHghCTEz4IUPc8oOepojeiz6wse47cFmz2wKwCi6rZzu7hwYcylq7u9MD0dh3OAy3mcnEb1w xk/1VrFM5Iaak1m3UIfQTH1a1AVyBRtto+1ztix/caa+fOWmerIsVaJXs5VBchBjDVfns2Nn 2ZUv2BTgZkswK9TPlU2WsNDAY/8WIhxbPOmlJahDJlGNQsHSK6sbn6QpsWrEzQ/F0nFAP11H 7MsyFtt31zVR4S750INvrM6wm0mSG0PkFeSGdYD+gBkAPgtgvg== --B_3457431440_18116807--