You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Robert Levas (JIRA)" <ji...@apache.org> on 2015/06/23 02:03:23 UTC
[jira] [Updated] (AMBARI-12082) Ambari agent temp directory has
wrong permissions on ambari-server host
[ https://issues.apache.org/jira/browse/AMBARI-12082?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Levas updated AMBARI-12082:
----------------------------------
Attachment: AMBARI-12082_01.patch
> Ambari agent temp directory has wrong permissions on ambari-server host
> -----------------------------------------------------------------------
>
> Key: AMBARI-12082
> URL: https://issues.apache.org/jira/browse/AMBARI-12082
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent
> Affects Versions: 2.1.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Critical
> Fix For: 2.1.0
>
> Attachments: AMBARI-12082_01.patch
>
>
> The Ambari agent temp directory (typically /var/lib/ambari-agent/data/tmp) has the incorrect permissions on the Ambari server host. This is causing web alert errors on SUSE 11.3 for tests that do not run as root when Kerberos is enabled. The issues appears to be masked on other platforms.
> The permissions should be 777 but appear to be 655.
> {noformat:title=Ambari server host}
> $ ls -ld /var/lib/ambari-agent/data/tmp
> drwxr-xr-x. 6 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> {noformat}
> {noformat:title=Ambari agent host}
> # ls -ld /var/lib/ambari-agent/data/tmp
> drwxrwxrwx. 7 root root 4096 Jun 22 23:08 /var/lib/ambari-agent/data/tmp
> {noformat}
> An example of the related errror found in the alert message on a SUSE 11.3 cluster
> {noformat}
> Connection failed to http://HOST:50070 (Execution of '/usr/bin/kinit -l 5m -c /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f -kt /etc/security/keytabs/spnego.service.keytab HTTP/HOST@EXAMPLE.COM > /dev/null' returned 1. kinit(v5): Credentials cache permissions incorrect when initializing cache /var/lib/ambari-agent/data/tmp/web_alert_cc_66ba10499e9d406dec0c7f30fda53f8f)
> {noformat}
> Errors are seen for HDFS and Yarn after Kerberos is enabled on the cluster.
> *Steps to reproduce:*
> # Install ambari-sever and ambari-agent packages - {{yum -y install ambari-agent ambari-server}}
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> {noformat}
> # Setup Ambari server - {{ambari-server setup -s}}
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> {noformat}
> # Start Ambari server - {{ambari-server start}}
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxrwxrwx. 2 root root 4096 Jun 22 22:33 /var/lib/ambari-agent/data/tmp/
> {noformat}
> # Create cluster
> ** After 'Confirm Hosts' page completes:
> ** {noformat}
> # ls -ld /var/lib/ambari-agent/data/tmp/
> drwxr-xr-x. 3 root root 4096 Jun 22 23:47 /var/lib/ambari-agent/data/tmp/
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)