You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Robert Levas (JIRA)" <ji...@apache.org> on 2015/03/04 03:38:04 UTC

[jira] [Created] (AMBARI-9917) Kerberos: Add Host did not generate keytabs

Robert Levas created AMBARI-9917:
------------------------------------

             Summary: Kerberos: Add Host did not generate keytabs
                 Key: AMBARI-9917
                 URL: https://issues.apache.org/jira/browse/AMBARI-9917
             Project: Ambari
          Issue Type: Bug
          Components: ambari-server
    Affects Versions: 2.0.0
            Reporter: Robert Levas
            Assignee: Robert Levas
            Priority: Critical
             Fix For: 2.0.0


1) using build 440
2) three node cluster, hdfs, yarn, mr, tez, hive, zk, pig, ams
3) setup nnha, rmha
4) enabled kerb
5) all is good
6) added second hive metastore
7) added second hiveserver2
8) all is good
9) added host with DN and clients
10) keytabs are not created on the new host. i was not prompted for kdc creds. basically, i did 1-9 all in one shot, never logging out.

As a workaround #1:
- Attempted to regen keytabs, with "missing only" checkbox checked. it looks like it remade all principals and keytabs for the cluster but didn't distribute the keytabs. That is concerning that this might be an additional issue for another JIRA maybe. Anycase: didn't result in getting keytabs on my new host.

As a workaround #2:
- Attempted regen keytabs all. Made all princs and keytabs and distributed for cluster hosts except my new host. So no lock here either.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)