You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Hudson (JIRA)" <ji...@apache.org> on 2015/02/17 23:06:11 UTC

[jira] [Commented] (AMBARI-9556) Knox installation does not create correct gateway-identity cert

    [ https://issues.apache.org/jira/browse/AMBARI-9556?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14324983#comment-14324983 ] 

Hudson commented on AMBARI-9556:
--------------------------------

SUCCESS: Integrated in Ambari-trunk-Commit #1795 (See [https://builds.apache.org/job/Ambari-trunk-Commit/1795/])
AMBARI-9556. Knox installation does not create correct gateway-identity cert (Sumit Gupta via srimanth) (sgunturi: http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=bed8260b354962b060b4312ea7ba3a5a1aea3e0a)
* ambari-server/src/test/python/stacks/2.2/KNOX/test_knox_gateway.py
* ambari-server/src/main/resources/common-services/KNOX/0.5.0.2.2/package/scripts/knox.py


> Knox installation does not create correct gateway-identity cert
> ---------------------------------------------------------------
>
>                 Key: AMBARI-9556
>                 URL: https://issues.apache.org/jira/browse/AMBARI-9556
>             Project: Ambari
>          Issue Type: Bug
>          Components: stacks
>    Affects Versions: 2.0.0
>            Reporter: Sumit Gupta
>            Assignee: Sumit Gupta
>             Fix For: 2.0.0
>
>         Attachments: AMBARI-9556.patch
>
>
> During startup of knox (after install), a cert file is generated using the knoxcli tool and passing in the hostname that knox is on. There is a check for this generation to occur if it hasn't been done before. The check is for the existance of the gateway cert store file. This is done correctly in Ambari 1.7 but the check in 2.x is now against the wrong file. This results in the command never getting executed and the knox server creating a default cert on startup which has 'localhost' in it as the CN instead of the actual hostname.
> This commit shows where the correct check is lost. 
> https://git-wip-us.apache.org/repos/asf?p=ambari.git;a=blobdiff;f=ambari-server/src/main/resources/stacks/HDP/2.2/services/KNOX/package/scripts/knox.py;h=7d7d20cc53df4866cfb5bb90171998edcfbcc549;hp=627462ae06a321248085d4d6e6428a780a924aa1;hb=6ed4fe4508cf7b1927bacca29a5b85f89b86746a;hpb=45468b65af0f731cd14c2ad0516bba9f7cddf217



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)