You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ambari.apache.org by "Jimmy Da (JIRA)" <ji...@apache.org> on 2015/01/13 02:05:34 UTC
[jira] [Updated] (AMBARI-9098) Cannot install new secure services
to existing secure HDFS cluster
[ https://issues.apache.org/jira/browse/AMBARI-9098?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jimmy Da updated AMBARI-9098:
-----------------------------
Description:
hadoop.security.auth_to_local in core-site is overwritten to null when installing new service to a secure cluster
1. Setup secure HDFS cluster with services (HDFS, MR2, YARN, ZooKeeper) and Kerberos
2. Configure secure user for Oozie (or any other secure service) - create user+setup keytab
3. Install Oozie via Ambari UI --> FAIL
FATAL namenode.NameNode (NameNode.java:main(1400)) - Exception in namenode join
java.lang.IllegalArgumentException: Invalid rule: null
4. Check hadoop.security.auth_to_local property in HDFS configurations under Advanced core-site, see null instead of "RULE:..."
---------------------------------------------
The core-site overwrite is happening in ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/after-INSTALL/scripts/shared_initialization.py, when I commented out the lines, it works again, but I'm sure there's a reason the check and rewrite is there
Thanks!
was:
1. Setup secure HDFS cluster with services (HDFS, MR2, YARN, ZooKeeper) and Kerberos
2. Configure secure user for Oozie (or any other secure service) - create user+setup keytab
3. Install Oozie via Ambari UI --> FAIL
FATAL namenode.NameNode (NameNode.java:main(1400)) - Exception in namenode join
java.lang.IllegalArgumentException: Invalid rule: null
4. Check hadoop.security.auth_to_local property in HDFS configurations under Advanced core-site, see null instead of "RULE:..."
---------------------------------------------
The core-site overwrite is happening in ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/after-INSTALL/scripts/shared_initialization.py, when I commented out the lines, it works again, but I'm sure there's a reason the check and rewrite is there
Thanks!
> Cannot install new secure services to existing secure HDFS cluster
> ------------------------------------------------------------------
>
> Key: AMBARI-9098
> URL: https://issues.apache.org/jira/browse/AMBARI-9098
> Project: Ambari
> Issue Type: Bug
> Components: ambari-agent, ambari-server
> Affects Versions: 2.0.0, 2.1.0
> Reporter: Jimmy Da
>
> hadoop.security.auth_to_local in core-site is overwritten to null when installing new service to a secure cluster
> 1. Setup secure HDFS cluster with services (HDFS, MR2, YARN, ZooKeeper) and Kerberos
> 2. Configure secure user for Oozie (or any other secure service) - create user+setup keytab
> 3. Install Oozie via Ambari UI --> FAIL
> FATAL namenode.NameNode (NameNode.java:main(1400)) - Exception in namenode join
> java.lang.IllegalArgumentException: Invalid rule: null
> 4. Check hadoop.security.auth_to_local property in HDFS configurations under Advanced core-site, see null instead of "RULE:..."
> ---------------------------------------------
> The core-site overwrite is happening in ambari-server/src/main/resources/stacks/HDP/2.0.6/hooks/after-INSTALL/scripts/shared_initialization.py, when I commented out the lines, it works again, but I'm sure there's a reason the check and rewrite is there
> Thanks!
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)