You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by Dmytro Sen <ds...@hortonworks.com> on 2015/08/21 16:07:02 UTC
Review Request 37679: Manual registration of non root ambari agent
with two way ssl authentication failed
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/37679/
-----------------------------------------------------------
Review request for Ambari, Artem Baranchuk, Myroslav Papirkovskyy, and Vitalyi Brodetskyi.
Bugs: AMBARI-12853
https://issues.apache.org/jira/browse/AMBARI-12853
Repository: ambari
Description
-------
Install ambari-server
Generate necessary certificates and setup ambari two way ssl authentication.
Install ambari-agent on hosts.
Configure ambari-agent to run under non root user.
Try manual host registration.
IOError: Request to
https://192.168.64.101:8441/agent/v1/register/c6402.ambari.apache.org failed due to [Errno 13] Permission denied: '/var/lib/ambari-agent/keys/ca.crt'
/var/lib/ambari-agent/keys is created when package is installed and has root owner, so when ambari-agent is running under non-root it is not able to write to that dir.
Should I chown that dir when configuring non root agents? Or agent itself should manage that dir?
Diffs
-----
ambari-agent/conf/unix/ambari-agent f665934
Diff: https://reviews.apache.org/r/37679/diff/
Testing
-------
Unit tests passed
Thanks,
Dmytro Sen