[jira] [Created] (AMBARI-8307) Perm 400 for spnego keytab, unable to start webhcat

["Andrii Tkach (JIRA)" <ji...@apache.org>]

Andrii Tkach created AMBARI-8307:
------------------------------------

             Summary: Perm 400 for spnego keytab, unable to start webhcat
                 Key: AMBARI-8307
                 URL: https://issues.apache.org/jira/browse/AMBARI-8307
             Project: Ambari
          Issue Type: Bug
          Components: ambari-web
    Affects Versions: 1.7.0
            Reporter: Andrii Tkach
            Assignee: Andrii Tkach
            Priority: Blocker
             Fix For: 1.7.0


We have a permissions issue on the /etc/security/keytabs/spnego.service.keytab when running /var/lib/ambari-server/resources/scripts/(kerberos-setup.sh|keytabs.sh).

I have my Storm DRPC, Nimbus, and UI servers on the same host as my Hive components.  The spnego.service.keytab is 400 when it should be 440:

{code}
[hcat@revo2 webhcat]$ stat /etc/security/keytabs/spnego.service.keytab 
  File: `/etc/security/keytabs/spnego.service.keytab'
  Size: 4594      Blocks: 16         IO Block: 4096   regular file
Device: fd00h/64768d	Inode: 538521      Links: 1
Access: (0400/-r--------)  Uid: (  507/   storm)   Gid: (  500/  hadoop)
Access: 2014-11-11 11:40:00.626724368 -0600
Modify: 2014-11-11 09:19:39.000000000 -0600
Change: 2014-11-11 09:21:58.773876115 -0600
{code}

After changing it manually to 440 I can start WebHCat. 




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)