You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Robert Levas (JIRA)" <ji...@apache.org> on 2015/06/24 19:03:04 UTC
[jira] [Created] (AMBARI-12128) Falcon Server Web UI alert fails
when Kerberos is enabled
Robert Levas created AMBARI-12128:
-------------------------------------
Summary: Falcon Server Web UI alert fails when Kerberos is enabled
Key: AMBARI-12128
URL: https://issues.apache.org/jira/browse/AMBARI-12128
Project: Ambari
Issue Type: Bug
Components: ambari-agent, ambari-server
Affects Versions: 2.1.0
Reporter: Robert Levas
Assignee: Robert Levas
Priority: Blocker
Fix For: 2.1.0
Falcon Server Web UI alert fails when Kerberos is enabled. The error message is
{noformat}
agent/data/tmp/web_alert_cc_2144dc375b8556f5a0c2629adedd2a99 -kt {{falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab}} {{falcon-startup.properties/*.falcon.http.authentication.kerberos.principal}} > /dev/null' returned 1. kinit: Client not found in Kerberos database while getting initial credentials)
{noformat}
*Cause*
This issue was introduced when the patch for AMBARI-11656 was applied.
The issue is related to this line:
{code:title=ambari_agent/alerts/base_alert.py:217}
replacement_match_regex = r"{{(%s)}}" % placeholder_key
{code}
When the relative falcon properties are applied, the generated regular expression becomes
{noformat}
{{(falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab)}}
{noformat}
Which wants to match on values like:
* falcon-startup.properties.falcon.http.authentication.kerberos.keytab
* falcon-startup.properties/.falcon.http.authentication.kerberos.keytab
* falcon-startup.properties/////////////Rfalcon.http.authentication.kerberos.keytab
Not the one we really want - falcon-startup.properties/*.falcon.http.authentication.kerberos.keytab
Either the {{*}} needs to be escaped or the use of regular expressions needs to be changed.
*Solution*
Remove the regular expression replacement and use somple string replacement instead.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)