You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Robert Levas (JIRA)" <ji...@apache.org> on 2015/06/24 19:13:04 UTC
[jira] [Updated] (AMBARI-12128) Falcon Server Web UI alert fails
when Kerberos is enabled
[ https://issues.apache.org/jira/browse/AMBARI-12128?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Levas updated AMBARI-12128:
----------------------------------
Attachment: AMBARI-12128_01.patch
> Falcon Server Web UI alert fails when Kerberos is enabled
> ---------------------------------------------------------
>
> Key: AMBARI-12128
> URL: https://issues.apache.org/jira/browse/AMBARI-12128
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent, ambari-server
> Affects Versions: 2.1.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Blocker
> Labels: alerts, kerberos
> Fix For: 2.1.0
>
> Attachments: AMBARI-12128_01.patch
>
>
> Falcon Server Web UI alert fails when Kerberos is enabled. The error message is
> {noformat}
> agent/data/tmp/web_alert_cc_2144dc375b8556f5a0c2629adedd2a99 -kt {{falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab}} {{falcon-startup.properties/*.falcon.http.authentication.kerberos.principal}} > /dev/null' returned 1. kinit: Client not found in Kerberos database while getting initial credentials)
> {noformat}
> *Cause*
> This issue was introduced when the patch for AMBARI-11656 was applied.
> The issue is related to this line:
> {code:title=ambari_agent/alerts/base_alert.py:217}
> replacement_match_regex = r"{{(%s)}}" % placeholder_key
> {code}
> When the relative falcon properties are applied, the generated regular expression becomes
> {noformat}
> {{(falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab)}}
> {noformat}
> Which wants to match on values like:
> * falcon-startup.properties.falcon.http.authentication.kerberos.keytab
> * falcon-startup.properties/.falcon.http.authentication.kerberos.keytab
> * falcon-startup.properties/////////////Rfalcon.http.authentication.kerberos.keytab
> Not the one we really want - falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab
> Either the {{*}} needs to be escaped or the use of regular expressions needs to be changed.
> *Solution*
> Remove the regular expression replacement and use somple string replacement instead.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)