[jira] [Created] (AMBARI-12082) Ambari agent temp directory has wrong permissions on ambari-server host

["Robert Levas (JIRA)" <ji...@apache.org>]

Robert Levas created AMBARI-12082:
-------------------------------------

             Summary: Ambari agent temp directory has wrong permissions on ambari-server host
                 Key: AMBARI-12082
                 URL: https://issues.apache.org/jira/browse/AMBARI-12082
             Project: Ambari
          Issue Type: Bug
          Components: ambari-agent
    Affects Versions: 2.1.0
            Reporter: Robert Levas
            Assignee: Robert Levas
            Priority: Critical
             Fix For: 2.1.0
         Attachments: AMBARI-12082_01.patch

The Ambari agent temp directory (typically /var/lib/ambari-agent/data/tmp) has the incorrect permissions on the Ambari server host. This is causing web alert errors on SUSE 11.3 for tests  that do not run as root when Kerberos is enabled.  The issues appears to be masked on other platforms. 

The permissions should be 777 but appear to be 655.

{noformat:title=Ambari server host}
$ ls -ld /var/lib/ambari-agent/data/tmp
drwxr-xr-x. 6 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
{noformat}

{noformat:title=Ambari agent host}
# ls -ld /var/lib/ambari-agent/data/tmp
drwxrwxrwx. 7 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
{noformat}

An example of the related errror found in the alert message on a SUSE 11.3 cluster 
{noformat}
Connection failed to http://HOST:50070 (Execution of '/usr/bin/kinit -l 5m -c /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f -kt /etc/security/keytabs/spnego.service.keytab HTTP/HOST@EXAMPLE.COM > /dev/null' returned 1. kinit(v5): Credentials cache permissions incorrect when initializing cache /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f)
{noformat}

Errors are seen for HDFS and Yarn after Kerberos is enabled on the cluster. 

*Steps to reproduce:*
# Install ambari-sever and ambari-agent packages - {{yum -y install ambari-agent ambari-server}}
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
{noformat}
# Setup Ambari server - {{ambari-server setup -s}}
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
{noformat}
# Start Ambari server - {{ambari-server start}}
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
{noformat}
# Create cluster
** After 'Confirm Hosts' page completes:  
** {noformat}
# ls -ld /var/lib/ambari-agent/data/tmp/
drwxr-xr-x. 3 root root 4096 Jun 22 23:47 /var/lib/ambari-agent/data/tmp/
{noformat}




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)