You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Mahadev konar (JIRA)" <ji...@apache.org> on 2015/06/24 19:15:04 UTC

[jira] [Commented] (AMBARI-12128) Falcon Server Web UI alert fails when Kerberos is enabled

    [ https://issues.apache.org/jira/browse/AMBARI-12128?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14599756#comment-14599756 ] 

Mahadev konar commented on AMBARI-12128:
----------------------------------------

+1 for the patch.

> Falcon Server Web UI alert fails when Kerberos is enabled
> ---------------------------------------------------------
>
>                 Key: AMBARI-12128
>                 URL: https://issues.apache.org/jira/browse/AMBARI-12128
>             Project: Ambari
>          Issue Type: Bug
>          Components: ambari-agent, ambari-server
>    Affects Versions: 2.1.0
>            Reporter: Robert Levas
>            Assignee: Robert Levas
>            Priority: Blocker
>              Labels: alerts, kerberos
>             Fix For: 2.1.0
>
>         Attachments: AMBARI-12128_01.patch
>
>
> Falcon Server Web UI alert fails when Kerberos is enabled.  The error message is 
> {noformat}
> agent/data/tmp/web_alert_cc_2144dc375b8556f5a0c2629adedd2a99 -kt {{falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab}} {{falcon-startup.properties/*.falcon.http.authentication.kerberos.principal}} > /dev/null' returned 1. kinit: Client not found in Kerberos database while getting initial credentials)
> {noformat}
> *Cause*
> This issue was introduced when the patch for AMBARI-11656 was applied.  
> The issue is related to this line:
> {code:title=ambari_agent/alerts/base_alert.py:217}
>       replacement_match_regex = r"{{(%s)}}" % placeholder_key
> {code}
> When the relative falcon properties are applied, the generated regular expression becomes 
> {noformat}
> {{(falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab)}}
> {noformat}
> Which wants to match on values like:
> * falcon-startup.properties.falcon.http.authentication.kerberos.keytab
> * falcon-startup.properties/.falcon.http.authentication.kerberos.keytab
> * falcon-startup.properties/////////////Rfalcon.http.authentication.kerberos.keytab
> Not the one we really want - falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab
> Either the {{*}} needs to be escaped or the use of regular expressions needs to be changed.
> *Solution*
> Remove the regular expression replacement and use somple string replacement instead. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)