You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@ambari.apache.org by Andrew Onischuk <ao...@hortonworks.com> on 2016/04/20 16:13:03 UTC
Review Request 46439: Ambari2400:Deploy fails at Confirm Hosts page
due to Two-way SSL authentication failure
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/46439/
-----------------------------------------------------------
Review request for Ambari and Dmitro Lisnichenko.
Bugs: AMBARI-15992
https://issues.apache.org/jira/browse/AMBARI-15992
Repository: ambari
Description
-------
With Ambari2400 on above environment setup, all tests have failed at Confirm
Hosts page.
We see the below error in ambari-agent logs
Two-way SSL authentication failed. Ensure that server and agent certificates were signed by the same CA and restart the agent.
In order to receive a new agent certificate, remove existing certificate file from keys directory. As a workaround you can turn off two-way SSL authentication in server configuration(ambari.properties)
Exiting..
ERROR 2016-04-11 21:26:55,952 Controller.py:194 - Unable to connect to: https://os-r6-jfiyhu-24-frmwork-repro-5.novalocal:8441/agent/v1/register/os-r6-jfiyhu-24-frmwork-repro-4.novalocal
Traceback (most recent call last):
File "/usr/lib/python2.6/site-packages/ambari_agent/Controller.py", line 147, in registerWithServer
ret = self.sendRequest(self.registerUrl, data)
File "/usr/lib/python2.6/site-packages/ambari_agent/Controller.py", line 426, in sendRequest
raise IOError('Request to {0} failed due to {1}'.format(url, str(exception)))
IOError: Request to https://os-r6-jfiyhu-24-frmwork-repro-5.novalocal:8441/agent/v1/register/os-r6-jfiyhu-24-frmwork-repro-4.novalocal failed due to [Errno 185090050] _ssl.c:330: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
ERROR 2016-04-11 21:26:55,952 Controller.py:195 - Error:Request to https://os-r6-jfiyhu-24-frmwork-repro-5.novalocal:8441/agent/v1/register/os-r6-jfiyhu-24-frmwork-repro-4.novalocal failed due to [Errno 185090050] _ssl.c:330: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
WARNING 2016-04-11 21:26:55,952 Controller.py:196 - Sleeping for 29 seconds and then trying again
Artfacts can be found [here](http://linux-
jenkins.qe.hortonworks.com/home/jenkins/qe-artifacts/os-r6-jfiyhu-24-frmwork-
repro/ambari-frmwork-1460410683/artifacts/screenshots/com.hw.ambari.ui.tests.i
nstaller.InstallHadoop/install/_11_21_26_54_Element_has_not_been_found_within_
1440_seconds__/)
Same setup works fine on Ambari222. Could you please help take a look to
figure out the issue
Diffs
-----
ambari-agent/conf/unix/ambari-agent fbe219d
Diff: https://reviews.apache.org/r/46439/diff/
Testing
-------
mvn clean test
Thanks,
Andrew Onischuk
Re: Review Request 46439: Ambari2400:Deploy fails at Confirm Hosts
page due to Two-way SSL authentication failure
Posted by Dmitro Lisnichenko <dl...@hortonworks.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/46439/#review129736
-----------------------------------------------------------
Ship it!
Ship It!
- Dmitro Lisnichenko
On April 20, 2016, 5:13 p.m., Andrew Onischuk wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/46439/
> -----------------------------------------------------------
>
> (Updated April 20, 2016, 5:13 p.m.)
>
>
> Review request for Ambari and Dmitro Lisnichenko.
>
>
> Bugs: AMBARI-15992
> https://issues.apache.org/jira/browse/AMBARI-15992
>
>
> Repository: ambari
>
>
> Description
> -------
>
> With Ambari2400 on above environment setup, all tests have failed at Confirm
> Hosts page.
> We see the below error in ambari-agent logs
>
>
>
>
> Two-way SSL authentication failed. Ensure that server and agent certificates were signed by the same CA and restart the agent.
> In order to receive a new agent certificate, remove existing certificate file from keys directory. As a workaround you can turn off two-way SSL authentication in server configuration(ambari.properties)
> Exiting..
> ERROR 2016-04-11 21:26:55,952 Controller.py:194 - Unable to connect to: https://os-r6-jfiyhu-24-frmwork-repro-5.novalocal:8441/agent/v1/register/os-r6-jfiyhu-24-frmwork-repro-4.novalocal
> Traceback (most recent call last):
> File "/usr/lib/python2.6/site-packages/ambari_agent/Controller.py", line 147, in registerWithServer
> ret = self.sendRequest(self.registerUrl, data)
> File "/usr/lib/python2.6/site-packages/ambari_agent/Controller.py", line 426, in sendRequest
> raise IOError('Request to {0} failed due to {1}'.format(url, str(exception)))
> IOError: Request to https://os-r6-jfiyhu-24-frmwork-repro-5.novalocal:8441/agent/v1/register/os-r6-jfiyhu-24-frmwork-repro-4.novalocal failed due to [Errno 185090050] _ssl.c:330: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
> ERROR 2016-04-11 21:26:55,952 Controller.py:195 - Error:Request to https://os-r6-jfiyhu-24-frmwork-repro-5.novalocal:8441/agent/v1/register/os-r6-jfiyhu-24-frmwork-repro-4.novalocal failed due to [Errno 185090050] _ssl.c:330: error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib
> WARNING 2016-04-11 21:26:55,952 Controller.py:196 - Sleeping for 29 seconds and then trying again
>
>
> Artfacts can be found [here](http://linux-
> jenkins.qe.hortonworks.com/home/jenkins/qe-artifacts/os-r6-jfiyhu-24-frmwork-
> repro/ambari-frmwork-1460410683/artifacts/screenshots/com.hw.ambari.ui.tests.i
> nstaller.InstallHadoop/install/_11_21_26_54_Element_has_not_been_found_within_
> 1440_seconds__/)
>
> Same setup works fine on Ambari222. Could you please help take a look to
> figure out the issue
>
>
> Diffs
> -----
>
> ambari-agent/conf/unix/ambari-agent fbe219d
>
> Diff: https://reviews.apache.org/r/46439/diff/
>
>
> Testing
> -------
>
> mvn clean test
>
>
> Thanks,
>
> Andrew Onischuk
>
>